5aedf87420c49f478a3c2fa14d5066556888372616750b811c739d5951a3ca56

Analysis

user interaction
yes
max time kernel
292s
max time network
293s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 08:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 366KB
Sample261027-kbshcsswdw
SHA256 5aedf87420c49f478a3c2fa14d5066556888372616750b811c739d5951a3ca56
MD5 12dac1c20382cfefe31843c8f3facaa8
SHA1 6365b9ac3b9682e0fcc55c55cb422454f08fdee8
SHA512 ad33258ad9389712ca87b79a976ac7cb56acb4956c92e8da2fb9ab60631a935e3cc63a7ca8527dbbbfa8af3dcccbb13505f63fb55f38fc3fa732173610637fec
SSDEEP 3072:Pp9dh/CtUnkw9tfmFoJmOYlUpje60I4b09eqhaIifroZCkWVMbMQGIGZq7rdV3fm:LdhwUnx9tfmOJVpje60I4bRRlDEI
TLSH
T12F8409E6F190313D98A7C295A694FEFC852FA685DB010EA5F0136B6417C6BD30963ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence ransomware spyware stealer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
106	2408	chrome.exe

Executes dropped EXE 6 IoCs

pid	Process
4884	SKlauncher-4.0.54-setup.exe
2748	sklauncher.exe
1712	sklauncher.exe
3252	sklauncher.exe
2292	sklauncher.exe
6120	sklauncher.exe

Loads dropped DLL 20 IoCs

pid	Process
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
1712	sklauncher.exe
1712	sklauncher.exe
1712	sklauncher.exe
1712	sklauncher.exe
1712	sklauncher.exe
6120	sklauncher.exe
6120	sklauncher.exe
2292	sklauncher.exe
6120	sklauncher.exe
1712	sklauncher.exe
6120	sklauncher.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Run Powershell to get system information.

execution

PowerShell

T1059.001

pid	Process
1868	powershell.exe
424	powershell.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
1980	powershell.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	sklauncher.exe

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SKlauncher-4.0.54-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2408	chrome.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	sklauncher.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	SKlauncher-4.0.54-setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 19 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
3252	chrome.exe
3252	chrome.exe
1980	powershell.exe
1980	powershell.exe
1980	powershell.exe
424	powershell.exe
424	powershell.exe
424	powershell.exe
4884	SKlauncher-4.0.54-setup.exe
4884	SKlauncher-4.0.54-setup.exe
1868	powershell.exe
1868	powershell.exe
1868	powershell.exe
6120	sklauncher.exe
6120	sklauncher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe
Token: SeShutdownPrivilege	5016	chrome.exe
Token: SeCreatePagefilePrivilege	5016	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe

Suspicious use of SendNotifyMessage 31 IoCs

pid	Process
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
5016	chrome.exe
2748	sklauncher.exe
2748	sklauncher.exe
2748	sklauncher.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 2524	5016	chrome.exe	89
PID 5016 wrote to memory of 5888	5016	chrome.exe	90
PID 5016 wrote to memory of 5888	5016	chrome.exe	90
PID 5016 wrote to memory of 2408	5016	chrome.exe	91
PID 5016 wrote to memory of 2888	5016	chrome.exe	93
PID 5016 wrote to memory of 2888	5016	chrome.exe	93
PID 5016 wrote to memory of 5476	5016	chrome.exe	94
PID 5016 wrote to memory of 5476	5016	chrome.exe	94
PID 5016 wrote to memory of 1252	5016	chrome.exe	95
PID 5016 wrote to memory of 1252	5016	chrome.exe	95
PID 5016 wrote to memory of 3744	5016	chrome.exe	96
PID 5016 wrote to memory of 3744	5016	chrome.exe	96
PID 5016 wrote to memory of 4592	5016	chrome.exe	97
PID 5016 wrote to memory of 4592	5016	chrome.exe	97
PID 5016 wrote to memory of 5536	5016	chrome.exe	98
PID 5016 wrote to memory of 4152	5016	chrome.exe	100
PID 5016 wrote to memory of 4152	5016	chrome.exe	100
PID 5016 wrote to memory of 4672	5016	chrome.exe	101
PID 5016 wrote to memory of 4672	5016	chrome.exe	101
PID 5016 wrote to memory of 1832	5016	chrome.exe	102
PID 5016 wrote to memory of 1832	5016	chrome.exe	102
PID 5016 wrote to memory of 2156	5016	chrome.exe	106
PID 5016 wrote to memory of 3380	5016	chrome.exe	105
PID 5016 wrote to memory of 2156	5016	chrome.exe	106
PID 5016 wrote to memory of 5356	5016	chrome.exe	107
PID 5016 wrote to memory of 3380	5016	chrome.exe	105
PID 5016 wrote to memory of 5356	5016	chrome.exe	107
PID 5016 wrote to memory of 1972	5016	chrome.exe	108
PID 5016 wrote to memory of 1972	5016	chrome.exe	108
PID 5016 wrote to memory of 4296	5016	chrome.exe	109
PID 5016 wrote to memory of 4296	5016	chrome.exe	109
PID 5016 wrote to memory of 1376	5016	chrome.exe	110
PID 5016 wrote to memory of 1376	5016	chrome.exe	110
PID 5016 wrote to memory of 3720	5016	chrome.exe	111
PID 5016 wrote to memory of 3720	5016	chrome.exe	111
PID 5016 wrote to memory of 1088	5016	chrome.exe	112
PID 5016 wrote to memory of 1088	5016	chrome.exe	112
PID 5016 wrote to memory of 4060	5016	chrome.exe	113
PID 5016 wrote to memory of 4060	5016	chrome.exe	113
PID 5016 wrote to memory of 3188	5016	chrome.exe	115
PID 5016 wrote to memory of 5840	5016	chrome.exe	116
PID 5016 wrote to memory of 3468	5016	chrome.exe	117
PID 5016 wrote to memory of 5220	5016	chrome.exe	118
PID 5016 wrote to memory of 5220	5016	chrome.exe	118
PID 5016 wrote to memory of 5940	5016	chrome.exe	119
PID 5016 wrote to memory of 5940	5016	chrome.exe	119
PID 5016 wrote to memory of 2704	5016	chrome.exe	120
PID 5016 wrote to memory of 2704	5016	chrome.exe	120
PID 5016 wrote to memory of 1868	5016	chrome.exe	121
PID 5016 wrote to memory of 1868	5016	chrome.exe	121
PID 5016 wrote to memory of 3244	5016	chrome.exe	122
PID 5016 wrote to memory of 3244	5016	chrome.exe	122
PID 5016 wrote to memory of 3252	5016	chrome.exe	123
PID 5016 wrote to memory of 1436	5016	chrome.exe	124
PID 5016 wrote to memory of 4884	5016	chrome.exe	125
PID 4884 wrote to memory of 1980	4884	SKlauncher-4.0.54-setup.exe	127
PID 4884 wrote to memory of 424	4884	SKlauncher-4.0.54-setup.exe	129
PID 4884 wrote to memory of 1868	4884	SKlauncher-4.0.54-setup.exe	131
PID 5016 wrote to memory of 4840	5016	chrome.exe	134
PID 5016 wrote to memory of 4840	5016	chrome.exe	134
PID 2748 wrote to memory of 1712	2748	sklauncher.exe	137
PID 2748 wrote to memory of 4068	2748	sklauncher.exe	138
PID 2748 wrote to memory of 3252	2748	sklauncher.exe	140
PID 2748 wrote to memory of 2292	2748	sklauncher.exe	141

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffffbfdc728,0x7ffffbfdc734,0x7ffffbfdc740
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1600,i,16568684643223541848,697985258010793429,262144 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:5888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1484,i,3595489475325090525,1037516563394899460,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2288,i,1950154834770430806,3485564360473915842,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:13
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3020,i,9790648816697808296,10050923797734099312,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3036,i,4041332077414572535,12691426334624916185,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4696,i,5556550679628519135,4318043258369768004,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4892,i,15613382220222869989,2210704306232503321,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,17672566980779508834,18071771349246602752,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:5536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5900,i,13546054567005149886,5944577441784480581,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5916,i,13445616994205169995,6576088025888153213,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5040,i,14106556537693337302,14318843416065403923,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5824,i,10454500406697585961,650314595206211464,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5904,i,2704528585570457825,15545489806080057867,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6420,i,3362117670001557665,2312045215628798502,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6096,i,18387073523071627066,13519937619419494470,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6196,i,927781822149330026,15189817675893310064,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6152,i,7224647902356806963,14990077675092098896,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6036,i,6727052761518690241,7427947320594600385,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3032,i,7993809042033691049,12159043996669589937,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4940,i,12505152690213426810,10226348281881827547,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=256,i,44038664367838709,2972150215089070522,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:14
  2⤵
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4952,i,3158566232545240819,10130569581779806354,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3368,i,4957262638618064679,2741793904156562728,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4692,i,4683794010013798719,5545150082096049074,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5356,i,1071447614544617368,13599126756246719824,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3380,i,13368605076371497202,17397371149515968284,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6476,i,12032035655385843989,16973359060187275032,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6176,i,11285375226585018859,11276358789598104776,2097152 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1008,i,10429237731756707318,11881547978169421612,262144 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6520,i,5894844282193356172,5662404779090791296,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:14
  2⤵
  PID:1436
- C:\Users\Admin\Downloads\SKlauncher-4.0.54-setup.exe
  "C:\Users\Admin\Downloads\SKlauncher-4.0.54-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4884
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
    3⤵
    - Hide Artifacts: Ignore Process Interrupts
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:1980
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:424
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6220,i,15188606417772180148,17129724381034534199,524288 --field-trial-handle=1912,i,7328804244957681858,5093622859475605187,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:14
  2⤵
  PID:4840

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5688

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1820

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:6000

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4448

C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
"C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"
1⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2748
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1740,i,12628696611429673871,14511909212537298261,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,13661050790087545241,1394293080967418218,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1736 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1712
- C:\Windows\system32\reg.exe
  reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType
  2⤵
  PID:4068
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot,starship-icon --secure-schemes=starship-screenshot,starship-icon --bypasscsp-schemes=starship-screenshot,starship-icon --fetch-schemes=starship-screenshot,starship-icon --streaming-schemes=starship-screenshot,starship-icon --field-trial-handle=1740,i,12628696611429673871,14511909212537298261,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,13661050790087545241,1394293080967418218,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2008 /prefetch:11
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:3252
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot,starship-icon --secure-schemes=starship-screenshot,starship-icon --bypasscsp-schemes=starship-screenshot,starship-icon --fetch-schemes=starship-screenshot,starship-icon --streaming-schemes=starship-screenshot,starship-icon --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1793088999109440 --launch-time-ticks=768649439 --field-trial-handle=1740,i,12628696611429673871,14511909212537298261,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,13661050790087545241,1394293080967418218,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2588 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2292
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=0 --gpu-device-id=0 --gpu-sub-system-id=0 --gpu-revision=0 --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1740,i,12628696611429673871,14511909212537298261,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,13661050790087545241,1394293080967418218,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3100 /prefetch:10
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:6120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3e5a91b7-4dd9-42e6-bad8-76447a076713.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\3e5a91b7-4dd9-42e6-bad8-76447a076713.tmp
Size 5KB
SHA256 fdafd19bf9772548d816456b6d7d2d5ed662f2f9e7736be39efd66dadceaa775
MD5 1e221e9b673776b382a961581abdb3f4
SHA1 14e09f997b64b3c5bffac00f588d339293dabc96
SHA512 c373604db46f5fc227984c1de26879317c0541b07d18a29cd59d00297aa9fdcb5015e19d35e35d15d42eaf084e2fcaaf23ce5b435fd5547844d9f5102e17e769
SSDEEP 96:iC0d+2+07WJ3aJPWyqgfdf3XgWSl8h4otop5C+D3B6kGGfvQClg7cOqWBSNJgL0S:iC0d57WJ3aJ+yhZiU2nxNvEBqNNJgLUU
TLSH
T1F5C10AB1B47DA87B19F6D891B5033E43CEE8629A5550AF14DADA4F1D01EB0FC2346123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

749de0cf-a1f9-4cb7-bcc2-4e022f2de136.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\749de0cf-a1f9-4cb7-bcc2-4e022f2de136.tmp
Size 4KB
SHA256 cd8f0966b7d997af795535aef271b242033385c9b770a0d7614b7696b3365cc6
MD5 d05bae0c70ff0b823599507e6216a682
SHA1 84df082d71f8307e34a7eb176c1156f1f243bc1a
SHA512 990cd600259788ef95d6433a7c28aa977afcd96dd8106bce224cde0fe88e017304980e515c1c4aae0622367f54abf2f8ee9fae5f1937467c0a00de16eee2fa79
SSDEEP 96:8C0d+2+07WJ3aJPWyqgfdfrgnRDotok5C4D3B6FJGyvQCl47YgZPE4/Rv4a:8C0d57WJ3aJ+yhYDUDJxS0rYgZsM
TLSH
T127A129B0F47D9D3755FAC986F9423A07DEE8A29BA921EF80D5D90E0920F70EC0342123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ddfad73-beae-4ae8-b4ab-e124a3ece2b8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7ddfad73-beae-4ae8-b4ab-e124a3ece2b8.tmp
Size 5KB
SHA256 6ea4f0221b59ff868abe4e0739ec71a7d5a1ae4c325ce31ac73e80cd6e498a75
MD5 c98519130e77f9bac691db155d7aa33b
SHA1 6124c944fde2d7dc180caa32d2ec5ba41bd006e6
SHA512 261fb43bf96e72de3da13a0518d93fc25875ddc7b4a58cbb915f6751c50edca0113454a2a4cb36284b75651e4159909bb12c6e95f6a3581aeec57d376436ca8f
SSDEEP 96:ibJ0d+2+07WJ3aJPWyqgfdf3XgWSl8h4otop5C7D3B6cGovQClg3SRJgFRNC39QF:it0d57WJ3aJ+yhZiU20xQXiRJgFuHVoT
TLSH
T1FCC1F8B1E46D9C7B59F6A885B1033D43CDE861AF6924BF58E9DA4E0D00A79EC1383123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8689474d-c929-48bf-a952-a894f2a9c751.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8689474d-c929-48bf-a952-a894f2a9c751.tmp
Size 5KB
SHA256 6b832d69df673899e254a9f492955160e3c41cfe540c2bec3a39cbf8bb0ab0b8
MD5 544b7ec93dfde7ceb9d9a518c2fdab2f
SHA1 1af14dd03710b3ef52426cbf750aaae23a35bd2b
SHA512 ed4b62c8660dc81de2fa1b1b9a3a7b52f567239f2e69a41041b2bfee44854514dc60a2dbad3d7b206b691acd3f91ad9ddd69ab37271435b91f38ae844c1b34bf
SSDEEP 96:ibJod+2+07WJ3aJPWyqgfdf3XgWSl8h4otop5C7D3B6cGovQClg3SRJgFRNC39QF:itod57WJ3aJ+yhZiU20xQXiRJgFuHVoT
TLSH
T13FC1F8B1E46E9C7B59F6A885B1033D43DDE861AF6914BF58E9EA4E0D00E75EC1383123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19aa1d7e-2210-41c3-aab8-54bf59aab23a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\19aa1d7e-2210-41c3-aab8-54bf59aab23a.tmp
Size 13KB
SHA256 442f69682dcbb9e4e80be396a46d74bb360e3192f18d54d376feea16dfd115d6
MD5 2fe50341f7627f58ada2d68ca7aab537
SHA1 2219e053d0042a76d2989ddf9b1ef875ef1c195f
SHA512 c4d82e6211cdc32cb798051b4a452eec507039482c4bcd8e469e2ae2c4494427860021bb490094b6cfa48ff5ff6f4f11b66aa24b027868b8a71305fbdbfe5d10
SSDEEP 192:kRdcBhnXgVJv7u2PRpWTH1eI69CRT9zHsb+WN91LCIv19NIP7+EIF2NR7i7u+kwq:kRdmhngJRX5PEVlwPu8pijW2b7t+WqE
TLSH
T16A52D67AE9202A3B6CDFD219F851B726E7F5102261D11E84EBFC892C24EB6DD3213117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e3e951a-46dc-4d77-aa54-8c4ffb3a0b6e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1e3e951a-46dc-4d77-aa54-8c4ffb3a0b6e.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

4315269a-206c-4acb-849f-44152d1727d6.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4315269a-206c-4acb-849f-44152d1727d6.tmp
Size 13KB
SHA256 43e2b3cc7b9b31ba24cf7343aaf7b7f6964df2604d0c0ca880d68e697a0baed1
MD5 3e15cd85fce5a6afa07b82f053d50d83
SHA1 42cfdf5792e00c7434bdec0e8bd4802778a6f8e7
SHA512 ab7cb500b4b4990fb6dc09219ebbb863655101856b129559de4948aba84c586a4d1ea24fdafa0363d0555aea1b1e583f2f8db101f9cc266b8feb23562f260e9f
SSDEEP 192:kRdcBhKXgVJv7u2PRpWTH1eI69CRT9zHsb+WN91LCIv1KeIP7+EIF2cR7i7u+kwq:kRdmhKgJRX5PEVlwPu8jijW2k7t+WqE
TLSH
T19952D67AED202A3B6CDFD219F851B726E7F5102261D11E84E7FC892C24EB6DD6213117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46424080-3159-457d-ab19-15aa8db56207.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\46424080-3159-457d-ab19-15aa8db56207.tmp
Size 11KB
SHA256 e4a6798a5a3ac5bfcdca0be1de7c1ba068de128e43648674a2965116a3931261
MD5 c2e8f234a92abc64bc610b7387f9806c
SHA1 f391f849e102e728082921cd7df078c80707f1ed
SHA512 1c7b51743330bbd656e783f6581c9cb403cd9fe0dbd23cc414c76dfc22d081a5d17455cd1f856f26622876f41f28b2b2204584121c65fd63978ca7f2e5db05fb
SSDEEP 192:e/k4K6dF7KxkXqK4I40pUZNCgVLHrKHfFKslEoHNXzKD/SF+ErUkKN9RK5Fc3DoU:GkjKF7KxkXqKf/pUZNCgVLH2HfgslVNS
TLSH
T1A732FA27A44DAA7F4FD8D50DCC136F8B7DF5029262780C28A6FB9C0803E978A51595BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c8d2c4d-45a2-4a77-8e25-d3b7644f38f1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6c8d2c4d-45a2-4a77-8e25-d3b7644f38f1.tmp
Size 13KB
SHA256 8eaeff7e87bae7781de9c41309caa8ec7619627b86ec3b4a22ee23117ed350fb
MD5 18561008f9a2a3b5908be2bec944951c
SHA1 5bb50f6836a652b8e57390657b1c3f547dfc6f8e
SHA512 b94aaae1b3deb6d2b4966e2f4730b6cfed95ab2eb1f5dafb5e6fe0ebfc18bd989bab275d5356c70a0a74ba9e60abeef8c530d152ef594fd92a1ead9b2487139e
SSDEEP 384:kRdmh9gn/tRX5PEyylwPu8DijW2D7t+WqE:0mh9gilwPu1L
TLSH
T16652D66AE920293BACDFD229F851BB16D7F5102261D01E88E7FC892C24EB6DD2213117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

761f54db-3c62-43ae-8b72-aa9ced26a64c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\761f54db-3c62-43ae-8b72-aa9ced26a64c.tmp
Size 13KB
SHA256 ba0ff454ab9305341466e25bd0eace81f03ccce309b73df35eeaf5ec736eae4b
MD5 f601280a197d06f689f69735470e243c
SHA1 caf4dda5d3c0d8008ef66d7608e75aaaaa66cdcb
SHA512 2dad2956c7c624bf0d2ac282f353de5389a94f1684e1055fc32e6cf8360b0b4aad41effa1da7f618e56f3baa0e05d846dd84f6eb32bfb9acaa4f7d18f7e49a77
SSDEEP 192:kRdcBh9XgVJv7u2PRpWTH1eI69CRT9zHsb+WN91LCIvyP7+EIF2zR7i7u+kw2qVo:kRdmh9gJRX5PEVlwPu8YjW217t+WqE
TLSH
T1DB52D57AE9202A3B6CDFD219F851BB16D7F5102261D11E88E7FC892C24EB6DD2213117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7bd076f1-76e0-42ca-9f82-0d6d50b47eea.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7bd076f1-76e0-42ca-9f82-0d6d50b47eea.tmp
Size 12KB
SHA256 c0265247b3071f94f339554dd1f7214ea4ed37ef307749bf0d92ba768466cd5a
MD5 d434414916de4eeb528835545f6b928b
SHA1 cf90a096d4e625ebe5f9109abee7e3ef85e36b02
SHA512 1cbb1e8543eece16473ac6f48b69d4528b394eba411a96cb42268690d75f0892a8d6cb656cc86ab3fa450879050edab7d154a1b8d624d3d0f0c0b9b4e4160a3f
SSDEEP 192:kRdcBh9XgVnv7uAPRp2HA69CRAy9zHsb+WN91LCIv4EIF2wR7i7u+kw2uVyIsnAC:kRdmh9gv7XkEyylwPu8VW2A7t+Wme
TLSH
T1B342C37AEE20653B6CDBD219F961B713D6F5102261D52E88E6FC882C24EB6DC2227117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8425cd52-60a5-4a91-baf4-8f2c9034ea09.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8425cd52-60a5-4a91-baf4-8f2c9034ea09.tmp
Size 13KB
SHA256 cf1a62ce7173c7ee1dcd62351e24735d5ac13203c6b8a6e0becded8ff38397ab
MD5 ecd8adfcb19e41378299d028370abd40
SHA1 a23a99a7e0e2ab6c5af43cc986a75af1e7e97625
SHA512 3648a52b3dad3345584618ac0f931620c27585c067c30f39c38126ad1bc5303c595e21cd3dfeace0a0a3901e19dadd0c9d37352f2f9cd56886ccebda7d2bd40f
SSDEEP 192:kRPcBhKXgVGv7u2PRpWTH1eI69CRT9zHsb+WN91LCIv12dmP7+EIF2+R7i7u+kwq:kRPmhKgyRX5PEVlwPu8KsjW267t+WqE
TLSH
T11652C66AE9102A3BACDFD219F951B717E7F5202261D11E84EBFC892C24EB6DD3213117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 218KB
SHA256 3d959f0b569826e414a1dccefcab42c14749c23712f30b04813ec720c6f22cfc
MD5 2c116c76a02bd4798cbfe3baebc7a92d
SHA1 4d9ae981f87ec370a6c95f9232b4b4521da6f41e
SHA512 59b974b67cd2572b5b8e777423eb8f457d18e4099a36ab373cd6fdd312f76d792221997c06ada3586e5ac9c7050dea14ab4b361fdf414a204ef1aa439ccdd61e
SSDEEP 6144:ayQGaN5+rJwz6tPI9iAUOve7aFWEXrITwxQJUQig:nDa7+rCz6pYxDeTEX8T+Mig
TLSH
T1782423A929319B90E16A639063C347BF08CD667C62F2783BA26335959D7AC144ECECD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 56KB
SHA256 8f9ddd163e906cf01202c08317b4b375e0abd0febb23bc3881c42303e3cb2068
MD5 a80f3151227c749d538bc5c6f36d1b86
SHA1 d8a046ff7ba248e265affd618ca2c0d3f1b6c9ba
SHA512 9d38b38acc82639f5e17b8ec2fd7112869cd61a532c22f33f37f6f6142f6f8dee1822f39deea487ba5d4478d63d7e5b5a50109ad0a5b378f23bd075d3fa7955b
SSDEEP 768:5RvLeUjMWecxQz4a3B1LZpkWGRxZ5cTbkk26NNnfOOhjz1QJ5MvN8C827BWyRpVc:5heUcz4AzwF8fFvk5INlNLr3aa5hTjU
TLSH
T1864312D26918D32138A98F551C0234F5DC0E72124786FE2D29FC2496329FE76E8E5F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 191KB
SHA256 9556279546f0da1a600ba1da91f62ef92b08f4cfd944922720076c91f8c98fea
MD5 3047d496cbb2ab178055c6ea99e50f41
SHA1 18a9c7c0004c33cd686ef5cdca4b06575fd54997
SHA512 6ba680c57cfc51c210b35f799a4201cf957e201aafdb60015974dd66312194ec0714754752c0188c6e1f172d1a026ee61a2eaa1a4e12f1de836353c79227b845
SSDEEP 3072:1HVvLtLaQRQ6OlrgZ6Nq1beHa8i4Mtqa6HOS5DrVHix0KfHSEDa9rgdjye2Ui6LY:7LxBE5gZD1be6606uUFKfHw9rgd+h6kh
TLSH
T19B1412D47F7EDA8DA36703D8257CAEFE732465238E98090669C79F08973941244BD741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 21KB
SHA256 5bcc3aa180e7f26f643cd5b2621cd7c2de193d0661d913a94afd3d4881a7a34b
MD5 55cfeb5304f00ff33469dc76a3b30758
SHA1 88d702fdaae15f269299c04f979b674d18c6cf18
SHA512 ce7ac3fd8eb49ee70d47ce174b1a81478079c831502a76b003ada4d6ce8d0bbb1adffb1b34f3e34026757148dfd9296bb85c312219da6e09c74520e0c4998a1e
SSDEEP 384:wTUaaxgF1D9PaaN75l/bEZTZ2EcB32774ZUqOa/6obeu1xrn9jiSnVVpBk:wTUhM1DLN75tbEZVu8cZUvU6oqu19n92
TLSH
T1ECA2E1ECE2974ADE9432B474C3401756163814E57688FE45FEAD36D2E020EADD3C2ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
Size 24KB
SHA256 f9074ac7ced776e010599f95c47c4f0306f31db29414d5dd9d8b80a844ce009d
MD5 bd9541be6af68e4dcdf4d9363ac06f26
SHA1 8b648d53599ec344fa9790f8ad2ed045194d5e1d
SHA512 7cbab524ae46f03f742908ba800e3e1bcfa992c10e0da189cd4fc81c22760ff2bc37acddafe54b87cec1142ce4196744c1104bcb7a0592ee6b2f5bbd2051a58e
SSDEEP 384:jWiPFVfdUiuti5OjtUfdTvsHUhVnp3tHjK3ieS6+NZoWZrM/q6Cb5hkNC1bMT:jWePlEZijskrDK336NZoerM6kNCVMT
TLSH
T126B2F10342AEC9B5EF4D02CB64947A97F00BAFD831EB1541545DAC9B1EB1232FE181E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
Size 451KB
SHA256 fcb3f75a2199bd6aa0a0be75d20f215ac26d640a2a4478fe0396bf707dcc732d
MD5 6ece2585236501e6fff8473518030b8d
SHA1 72f3daaac7de96138dd01905b07546bcf7606d3f
SHA512 4a5e9eaee41c0d9ad6230118a70f19166638e91331defdac4fd19c90a2146b74cde3d1a413b4c71edccd35f1576a487db89523d138c9eda6c416890462603f7e
SSDEEP 6144:xEG5KwySvrrWzjexo/TxgwjvNQeKXIOKRiPvDKqSU3H3qbY8KfeKIhH71SI:xEGKH7VtWEiu236bY8NUI
TLSH
T16BA423E3D8064C878DA403623BCC19DB552CF766CA6EAE65FCD705265AF85038E3349A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 21KB
SHA256 2634df0d79333ea639d7079f566163bb700a57783d3a8f09061c6b11a8a78bcb
MD5 16fee8edf1a69e98d81813f19fffa56e
SHA1 9aada423702d320e5dd580c831a3de3da06129c1
SHA512 0ed3ea486c66383aa308222a5552b5837ec0527e9716d837d5f5cfade007790d7f0e7f622ba41c535cfea7f510d85675da400d84863e60577af238e918913714
SSDEEP 384:80VKnq7QTS0TNdGqzD1+x9FpWtSdJrZJSk49KqdIaKLIfMuMJdPPYp:Kq7ATNYqn1+nWtS3VJmKqdKAMJdPPYp
TLSH
T1BDA2E128696925E7C4FC8E8852D6602A2D415C39E8F3AF9FFD40977C0743B284C1B2E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
Size 22KB
SHA256 40c97e11264cb1ac171847f410e85599e7ba7647e6dfe8d9d7f2c4b26d6ebb8f
MD5 6a9512d6b7d560ec8d28637f1f0ec189
SHA1 b0eb2fc3cc520974f84c177ebba34cd683646878
SHA512 a541189a3eb0ce250f32a5f01c92c100233922b9fe853e936c60b75e97c010929840aca21b204fe7ae3b4cadf380ab4f2134e9554328ba7ef7e105879546aeab
SSDEEP 384:H5OXeQD+vKTt/Ph2RWJFm8D8uX/ZfR7uCqCvoo99QKcvdnjaIfiHdLCU5SClv9L:H5cD+2tHhvJjIwBJaCqYrkhjfiH/5XlJ
TLSH
T120A2E1437C6FDE68803B92753156C173E412B239119633A3E303B76A95B850DFA59ABC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 39c6f9da7b192b35f5c2cd6a563d4d621357873194f50bf9c44e5f3df93aa81f
MD5 e1c8b67bf58ff60324428a6996254daf
SHA1 098c0fbafc76e1b13f5c9d11d0f7f98e3ee41e73
SHA512 4a9f811c946d6097d8171168265c800bded8fe53521e9d9bf922d66cbdb565c16a2aa2a21df016bc59cee85f116743b4388996c2c46de7bb7ed983fe6600a759
TLSH
T114611FC2C5B93640FB5C35BA18F2DECD31367558A66B1E07A37294B1B8973F52DC1012
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 9f629a9b2e0af29ca6d0ae4388ba81e7d078d8de44c154c90b9b2ea675227539
MD5 6d36646d0edabcc7e4e8e2002dc3e42a
SHA1 55b279be3edcf29f1f59df1f2c5acb8d9706b043
SHA512 d0510fa4358bba3f5e7e133cdd28864c2d576769c8205e9940b1bf1991d4803d0cb3ecfc61da57877f9fb729c16cf97867750c1a921505104211f01a651b3f71
TLSH
T13331CCD309DA6315FF8439BF1CF19D863136646AD66B0F03627594B288EF3F52C84011
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

10e91054-2ecf-43d1-88d2-fc70bb2fdc83.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\10e91054-2ecf-43d1-88d2-fc70bb2fdc83.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

39c0f07f-04fe-4be5-b7b5-201a108fe219.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\39c0f07f-04fe-4be5-b7b5-201a108fe219.tmp
Size 14KB
SHA256 04e220c9106a86786c650da01d564dca25308926b35e6767be0506c7997f9c68
MD5 b097c0d0f013ffea8ab70a90995f95a7
SHA1 13c403cb69d41688b4f11484f36e10ee39a9d80c
SHA512 2327054b0b78f6730a219e2f697ddbaa62575d1266639c51454f7bb7b762e0e19ab02d55eb052a8e971af9fb0a9d4fdc6b59aa01f42bab7d080cc722f01af7e0
SSDEEP 384:DjWNlTd4pzjbp8kkxJeJImAYCNkaIaZ+ngx4PkaqEy015faVgVM1THgMgCjgJ9qa:K4UwdyAN6adbn
TLSH
T191629CFBC3D8966DC95162F4AB247E1FCE2D0D2847283C2788E4BE4A63E1472D25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee064ac4-2954-40a0-96b2-ec6084244e6b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ee064ac4-2954-40a0-96b2-ec6084244e6b.tmp
Size 12KB
SHA256 fceaf20b8bb0ebe6025a6d22dfe0b7ba8c57dcf0869b1ee9e9456a0086cd1221
MD5 c58c96200363322fe6d3ccb02090e4f8
SHA1 e8cdbc5a1a1099be393165492f5936b9ee078e84
SHA512 5f8e3a2fd2dc794562d459257ff93d8aaf31664ef76ab72d73cf4f4a37f31c5460d1af5efc55297a0e48d194e113717d1b978018d34c6d4c9f4aba52611524e5
SSDEEP 384:DjWNlTd4pzjbp8kkxJeJImAY6aIaZ+ngx4PkaqEy015fkPVgVMaKqlTDPAdz3gIq:K43wTBtjw8DOS
TLSH
T18742ADFBC7D8926DC95162F46B247E1FCE2E0D2846283C2788D4BE4B63E1472D25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0b7cb4e-2b16-4719-b423-f217de237467.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f0b7cb4e-2b16-4719-b423-f217de237467.tmp
Size 14KB
SHA256 7d22e2d2c22caa012ba2467cb2b82283851e6ee950e14f502a609f42e9faa6dd
MD5 a3290477192571bc36fe360d4b3d1f74
SHA1 8cdbfdba25e4ba2f6bee502428c068cc9a2a8783
SHA512 8e1532178b790460f75489b35338b2a69d75fd4a10ccf793c1a314b11c33b77839855bbabc26f90661c6620bc3d71efabfa7a6e04de30c0a097f1944f7ee9700
SSDEEP 384:DjWNlTd4pzjbp8kkxJeJImAYCNYEfaIaZ+ngx4PkaqEy015faVgVM1THgMYjgJ9u:K4TwdyAI6ydb6
TLSH
T1AB62ADFBC3D8966DC95162F4AB247E1FCE2D0D2847283C2788E4BE4A63E1472D25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 96B
SHA256 74bc153ba671e0ab9cc89b90438203ea49a66fb866a6af47ac40d8a4071d546e
MD5 e08566d413b5d75e2dfd2a939dd16480
SHA1 527e305493a8b27f3293aa36d2d1ddfa9be6bfdb
SHA512 9d9b1a4a8436730e147f4e4e203377b82efc7de8b97c3e16ee9ecd6e5f589b2b25e67895bd686e2f53f1a69d504fd4fb0a0d01db1a16d0b27a94cbfdb43b3ccb
TLSH
T148B002AA05419747EE314FB1D7C52CC17B621D591B4B9B2780F4647A9B13A938321719
MD5 SHA1 SHA512 TLSH

Submit Download

b6a3e965-f9a7-43d4-95d3-c287b0a3e7aa.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b6a3e965-f9a7-43d4-95d3-c287b0a3e7aa.tmp
Size 13KB
SHA256 996c32bcddae7618ab7b5a63e479c70f252d7b2ad91b1f54d00f7b4a2a352d8d
MD5 706768a255d5cff768391e43feb60441
SHA1 7944570c0eafdc0c2726022d53b034027e48c2a2
SHA512 531ea29a544b69847e3a846eaf6c257e763df7d964c58e41f30f41a97f9cb8ee0dbaf6f1fddeaf7850a70be2e1208db9e1f7f98c8f0992bbbc638c9951361d64
SSDEEP 192:kR4cBhKXgV9v7u2PRpWTH1eI69CRT9zHsb+WN91LCIv12dmP7+EIF2+R7i7u+kwq:kR4mhKg9RX5PEVlwPu8KsjW267t+WqE
TLSH
T14452C66AE9102A3BACDFD219F951B717E6F5202261D11E84EBFC892C24EB6DD3213117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9a3ddaf-5178-446b-9a67-d31b1f192ca4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b9a3ddaf-5178-446b-9a67-d31b1f192ca4.tmp
Size 13KB
SHA256 4767cea4311e88caebb4edf840741c37e7977d11a29083a0214eceacf7565727
MD5 f7e0f1ef97b3d49933111e109eb88337
SHA1 208157a7dd4d10d4f782fbbcf12a5c411bc8ca06
SHA512 35af4797aa8c30168d78b0328471e0fa56cf33a38787100d75e47e9aa48e9c6d80f8f53dffa9fa7d3248d16e65d8f3fe3d82f289627bfb615bdf01f9bb006ef5
SSDEEP 192:kR4cBhKXgVJv7u2PRpWTH1eI69CRT9zHsb+WN91LCIv1KeIP7+EIF2cR7i7u+kwq:kR4mhKgJRX5PEVlwPu8jijW2k7t+WqE
TLSH
T1EF52D67AE9202A3B6CDFD219F851B726E7F5102261D11E84E7FC892C24EB6DD7213117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffe9e864-fdcb-45a4-98de-a8b7b2154493.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ffe9e864-fdcb-45a4-98de-a8b7b2154493.tmp
Size 11KB
SHA256 46e6c2a876134475b4ff247285efaaf0ef922c5233a96889d3377fddebb09481
MD5 ba5c5ebe7066e2068255b57d4cfb00a8
SHA1 ee46773856a40462fa68747138ec96a41af710ce
SHA512 ec85eddf66cbbf505cc8cf839e0efefac4336824cec28f61eba832a431b770145597669145114cce7485aedcd452ca1306bdfa5682e17b49f4dbf5fb53815985
SSDEEP 192:kRh9XgVnv7uAPRp2HfCy9zHsb+WNnCIv0+R7i7u+kw2uVyIsnAUgR:kRh9gv7X5ylwC8067t+WmR
TLSH
T13D32A379EE24753B6CDBD229F9217B13D7F5102222D51E88E6FC892C24EB6DC2227117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af2d91c1-f35b-4f12-bbe6-ff7cfab6d1ea.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\af2d91c1-f35b-4f12-bbe6-ff7cfab6d1ea.tmp
Size 5KB
SHA256 aff92593d59ed6060284cb20c5e8610b20862d2664519b19014ac1e7c31889a6
MD5 ccb49f4355ec5bf3bf145e6bb4a4a968
SHA1 f2d5fbe3243146d1dc9f1d5da70fd746161d0445
SHA512 0491ce0c253793e27859f06e55d8e4de3212f64b9856f9e2bc6fc1647b8127f95d1b76a4f02ab6a7aba4584dfddf49f59c520fac61e0c17a43b756a0cf874daf
SSDEEP 96:ibJ0d+2+07WJ3aJPWyqgfdf3XgWSl8h4otop5CnD3B6kGGfvQClg7cOqWBSNJgLX:it0d57WJ3aJ+yhZiU28xNvEBqNNJgLUU
TLSH
T12EC109B1B47DA83B59F6E891B5033E43CEE8629A5550AF14DADA4F0D01EB0FC2346123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2f19ea4-da74-4f55-96d0-9067c9c061ea.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b2f19ea4-da74-4f55-96d0-9067c9c061ea.tmp
Size 5KB
SHA256 c15711b6253916b4015db381bbe2b5d6c31a25da70eb316c594aef4fdd434739
MD5 67507d8af6459441c7533ab196cd1be9
SHA1 54360a1d84614897e1c6ca9a9e5170f2ab045d4d
SHA512 16b4b2e071a525c2b02b3362ca1924a3a5c4eca4f02691ffdac8cadc79870d58980945bf88971f753dfc4ce6977d1b075cfe2bd26da648d1f67b23b4a9a2de32
SSDEEP 96:iC0d+2+07WJ3aJPWyqgfdf3XgWSl8h4otop5CVD3B6kGGfvQClg7cOqWBSNJgL0S:iC0d57WJ3aJ+yhZiU2WxNvEBqNNJgLUU
TLSH
T182C10AB1B47DA87B19F6D891B5033E43CEE8629A5550AF14DADA4E1D01EB0FC2346123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

caf8d2fd-b26d-4331-88b4-d3c365b6ea29.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\caf8d2fd-b26d-4331-88b4-d3c365b6ea29.tmp
Size 5KB
SHA256 578f6ef62300934d6dde1a18b053e2fdbc952c8e5220284595f722e6f181a5c3
MD5 17c391c377514c3e83106bfbc3e66450
SHA1 1975ce515ad7e53446a6c3fc5ab2169ac07e9cc3
SHA512 b2c567cefdb134682f0ae21e3acf8de3cbab001fe941fc2ae5db8c0537e7e6eb51da0eae53de9e868e99828e9763c0a1134903cd8edb1cf0a78b6c57978476f0
SSDEEP 96:ibJ0d+2+07WJ3aJPWyqgfdf3XgWSl8h4otop5CtD3B6kGGfvQClg3SRJgFRNC39M:it0d57WJ3aJ+yhZiU2ixNvEiRJgFuHV2
TLSH
T1B0C1F8B1F46D9C7B5DF6A885B1033D43CDE861AB6924BF54E9EA4E0D00A79EC1383123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ec2e65ea-e161-4353-a53a-9fa8bae66e54.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ec2e65ea-e161-4353-a53a-9fa8bae66e54.tmp
Size 5KB
SHA256 3c088bf2ccd5bdbd114a2d822577525869b9231a859782a1948b0dfc76a146b7
MD5 ead55ac6522d83863e60428b5b8c5be3
SHA1 04795cdfaab4c938a4dd9e9c1dbc96770dd06405
SHA512 68497889fc02515ceb2ea14692d339610c0a01528fda559c4c4f632146094de11d6cd33da863fc87114a3cd8c8010c8abfc20beb1539fc96d59fc2fa891e3f00
SSDEEP 96:ibJ0d+2+07WJ3aJPWyqgfdf3XgWSl8h4otop5CnD3B6kGGfvQClg3SRJgFRNC39M:it0d57WJ3aJ+yhZiU28xNvEiRJgFuHV2
TLSH
T164C1F8B1E46D9C7B5DF6A885B1033D43CDE861AB6924BF54E9EA4E0D00A79EC1383123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 17KB
SHA256 5cd4b01f3276d2172936b7707237211eaf0fbe56e48abaf770fb9ce8b0aa0b7f
MD5 10a743c8d21b9b66ee9caa2bc07c2a7a
SHA1 8d87c105095dd86f69c5bcfddb051f8d5b491532
SHA512 d4e9f54e6e27d0af3f72144d47916e68fca31b7fb44af57714bfafe225c66cbc44f9b78f054d7a3b746709c01afc73d542428072a221dd8d70465acefa903e4c
SSDEEP 384:Y1eBaGH1iyWGW14bgu9ztwzLI0KeyJ52Pn5IAwF41R48WQ+Hd7eErbfkwE8hf9:0enVR1WicMztEI0o0RIAICR4QiEIbf1X
TLSH
T1477287A9616FADC7D89122B010D601E7FBE4E48CDF7551D8FE2BC92B5C90FB64EA0520
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 5788860e9b79e759720713572456147d9051c3b1a0793c81d582459b1e888250
MD5 6580fdfb198fbfe6cc487da5a9e2f727
SHA1 fc909cce36a57a5b0c6c3d730b815011ad9fea3b
SHA512 ff2298bcf36b3fe204aac88bb03a62a3434fcf6d297d7b1c26ce49a74faffa4ec1808e25b165cdbfa0de5626a509b751bce84aab6aba1b1250cb6ad44b39245d
SSDEEP 384:bSEgnT1iB2tD9uX0KxrVexVR2VWOEbDzdC0AIAg7XF49NAwdxBDKaN+IbWJhZRvg:JSZ62tRukKxrV9UNbFC0AIAghOiwdfGQ
TLSH
T10E72D76D226B8D87FDA121F41081039AFBE4E496EB9191DAFE97CD2B1C05E7D4B600F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_uqcrakov.keb.psm1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_uqcrakov.keb.psm1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\LICENSES.chromium.html
Size 19.4MB
SHA256 c971fa90cb787337e9df73773f3b43cd5621f035e53cded439bd927b3b759e0c
MD5 a6c6786bfc116c5376282d9f3ba1f518
SHA1 b1379f68904abf56a2a735d8a9037a658bb8fd43
SHA512 f641078364caa27eada1e24f52d922ab7f73c797a48e45eb9d0684f4faf4baf16be00f1e190bddd7e6a6f153636363795a67f0609e300929bc5099adf5550f28
SSDEEP 49152:rP2/kdNTzeM75TYp2tzwC0/X3r8xsJQnFTCa7id+Ui4WMEAcA3:u
TLSH
T1BE27B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\chrome_100_percent.pak
Size 117KB
SHA256 d76fe8fa3a14cd73e4c858746e2ab2d2fa6f2df38a906fa5814b50a8a895fc96
MD5 37c48e66c39832d32fa2e926ac503c4a
SHA1 2400135b49193c9786f1faa8d00169ce3d38ca98
SHA512 e1b631c3834fb84e96ab9fe44b12a8fa6c6b3c767e00a17ed8c3d8f8fbe7bc2dfe83fe33e7aca4f32439bdbad21d25af6b9e263d412922e40d09d4e421f12941
SSDEEP 3072:Kw4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:UYWFUbGz8LI1TdjQBQCrC
TLSH
T19AC3E0E773B0AD7DCA464BB743560070FCB30B2D06C2170A4A9AE479652AF98D9D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\chrome_200_percent.pak
Size 192KB
SHA256 b74ad439f3d3762657f3ba533a6af3ac63315c838ed46519891366f43d834a0e
MD5 e6a75313c720a6ebe3182b4e1db48328
SHA1 d60a503cf4604c816d9146d7fe4041018d445888
SHA512 3c8699b998c53c0414933ba18e0cf561488b9e209523a9b4093b68d38393e9a6bc683cdffc32a8050be25b473153b71743acf9c33f070166f1e15f2a453e8eb4
SSDEEP 3072:+FJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:+IGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1D01401D723B4AD3DDA530BB3A26710E0FD7A20291EB3514A569FD8397925E88C9CD343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\d3dcompiler_47.dll
Size 4.5MB
SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
MD5 19e527a35241c171d37dc1e6c530053c
SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
TLSH
T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\dxcompiler.dll
Size 24.4MB
SHA256 e00e2c37cb8924389a0363691e65a58e8ac2da9093f3db80dc8f7a5b89253fdd
MD5 a4e7878e0becf65a66dfe41864dc1d38
SHA1 8fd0faeef3e03920cdee68a4412f5c366017939f
SHA512 9ca5256ffae215a36f8b6db723a045b0d81971acd41176da31a13261eea6f17a410e8b60710fe61bb266091058324c0a6be601a42977736cf85a1e1660a5c400
SSDEEP 393216:Q6ZcgdIDct2PlA3fiT5g8MyJswaR74f3MkuyG:xSlS5P0P/G
TLSH
T17D473A122646D49CC059C879C7678B268A6C30E73FA7B9EFC0F451252B79EBC1B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\dxil.dll
Size 1.4MB
SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
MD5 c9a7241ce83437d54a82522aa0b54575
SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
TLSH
T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\ffmpeg.dll
Size 2.9MB
SHA256 af461f247e8bd008eee24e9954be9a6aed6402c50d716e16fab2b8a774ed98fa
MD5 238d3544d8b6e3cbec53881f7cebcdc1
SHA1 af89f4864ef1e000ad606a6f38903ac6baf70d02
SHA512 969702958dbab1c1d2032b2585b623badf2a257dfdf04d76e02da9efc85a69516c164ceb5ea2bf4f70e295ab34823894aed6793a0aace2a269b4e37901a0c0a8
SSDEEP 49152:7D/z7rej8QRCiaZle3wdzKKtBr4ZjBdOo+AVyZaLugoq4iRlMoEsZPuU//k///:Xze5ClZAn+jaLuAK2h
TLSH
T1DDE59D02F6D251EDD019C03497AFA213F271780A4F209AEF17A05A253F66FD86D7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\icudtl.dat
Size 10.4MB
SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
MD5 0a7cbe8e902379fc03c5c6c7c08c7d3b
SHA1 18ff020331534d21f24d922d4da3c253668e44d8
SHA512 88b94c5d350c2022aa27481e3a5c6bc74dd13ed1f2157dec4219d9b847469f7191f6fdc7305f3d27533c69f146324da8fdefbd8acbd2081965e74e8926d1e9c9
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89o:1/cBhORok2HiXUxO/RJk3IWhlYntjdOo
TLSH
T180B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\libEGL.dll
Size 457KB
SHA256 ca19e6fd75c9c1551dfdf0f5749f2e4dba73ea0d452de4ef5534e30a5558b34c
MD5 c25c4d588bb5cce3e5434e3e68983cb4
SHA1 d8f606bbfc04307b6f72324a0de57597612d7210
SHA512 c4036fce55a147a6d2b5cddddbe3ddc6ad423a86238c759a1c2208f6d99b3239f8654901e734f5888d816b881c2716a0cfbd2953bf422bb05ca31312a80eeac2
SSDEEP 6144:QZUmZ7ZgixMkdFQ/J7jP9eOFrlzcpds6RcQJf0cI6LfWUEOX3:UUmZ7NMkdu7oOFrlzcpd9RcRcI6igX3
TLSH
T1F5A47C15B3E549A9E07AC138CA538647EB71B4520B62F6DF02A0D2793F77BE45A3D320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\libGLESv2.dll
Size 7.7MB
SHA256 f2cf8f5477d6ee06e84e55b2e947871f709fbf0ea56dff22c73acb7743d0e0a1
MD5 de866d58780b9c87a50e5424aa541f9e
SHA1 eedd8fe12d95aa17b77e7e59ee11e20f2a735fce
SHA512 2c72ce47f4b27c6f94bf0e84d232212aedb716c1aec4f20af3816d5d9d5d1d065fd5d8dee03595fdd7ec35b7a461027b986ee4df17e3d20b83c9af5b871a41d7
SSDEEP 49152:UsAUvnbcxKJt5bRhAQOUXnByDkKCkYirf1tefIr3R4aNLD/N14918exGX5qdzrKL:1BLhOg8T4seoIdnKbCVVNUGq93BN3
TLSH
T1B2867C03F69681D9C05DD2788B67A223FA34B8450724F2DF2A9457152F6AFF0AB3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\af.pak
Size 599KB
SHA256 dcf39c3edbb6b0a625baee0263a9b426eadd1a6d1bfbf03a209501a18bc4b0e4
MD5 f351564453e36318d0442e29db7bd5c2
SHA1 d8dbe32c5656468b4f96a799dc7de3bab37b41e2
SHA512 07050f6b0c484d07b345200fdc6d2394201d3d1befa7310d15decfa2e67ed27724c53da2175148588f27822f28b31dff75e44b99658c141392e08a7d8be82789
SSDEEP 12288:ayyCh2E1FPQ6tRGtAM9q+ZRwBgNYChF+plGnVbi4H2JynDNsmpiALjKrFozv2nIX:nmyPftRGtAM9PZRwBgNYChF+plibi4HV
TLSH
T112D40A0BEB81173D09A06697FB0845B7FB5D626CD770B2BADDA982310966DFC10BD0D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\am.pak
Size 971KB
SHA256 b1d444f2346105a6e15f9b14fc5653e1edaa2b435290fb8f1238347a4d4ca8f9
MD5 79fad5635b13538c17b92b87df28ac9e
SHA1 81e142d7dd601f69d2f9b8c63b998adc926e8286
SHA512 3158dd5daaf08933549694bf952ebcc14c3db91afc2fac3a942b8d1d30892ab57e4dce966dbaa7dc323c2deca1f1145e7517be25020b48a2ea9bf7f7de5575d2
SSDEEP 24576:LtXGVoTx1A5t7hTCKPyaEVxsxHjnwvxehz/dIXV6sciy4VdeZtP9oPYOH+:LBGVr
TLSH
T13225AA547EF9F7570F8E8A1994320E4E9594AE4652802C38C35AE3FC2B2DF1B4DDE219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ar.pak
Size 1.0MB
SHA256 0baa84907ae148d2fc772cdd6c62dbeedfcc45aa4bc67c9d7164906ff0c69247
MD5 4f97d65aec99645540e4a520d1b98cbb
SHA1 268c71dc1bd13b16f7218de3f810db827dd57dbd
SHA512 01a4949ff4068dee8a851e24c640d06f02527f5381615bcb88a159f0c731bf4f176091944401411fe1bfb4bb2c5f32d6fcdb346939cdaf96b29c4db203fb331c
SSDEEP 12288:1yWqoQemCBmdpLFB62Ga9mwj3o0oCbv4UGPFk82/S+GNj6EuDe6NP+:1KoSEr
TLSH
T114357AE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\bg.pak
Size 1.1MB
SHA256 e4a5bea23a26a06af611a7cb518b22a1d53ec5df45a6322f0e264b99c7318441
MD5 077df43e5adc6bf502d5bbf057a0afe5
SHA1 6e608c0a0f3a3e19f63840c35ffc7d8c7dd0cf47
SHA512 b1996aab50923361c352acfd92c177d53e2336656e6ee29312227e685bf3d1202336ec51c9b757752b199f2c69a4d5185a5db05a600fe5b26f145e58da4191dd
SSDEEP 24576:81oSpWclYLYAgCzQkECRUPVb6nNo7j373ZKmiv3p1K4UfVDiiJw74uOVnaJcuSMQ:5SpWclYLYAmUUPVb6nNo7j373ZKmy3pG
TLSH
T1B83525A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\bn.pak
Size 1.4MB
SHA256 8e4aebe835b6b46f31c4a902e833d645cfe2990dcf354d1d3c5851e468b4c277
MD5 b86d084466ff7e935a52f7c472c76bda
SHA1 138e53555df928c96d23b499f05c2b0ecce33f35
SHA512 497501a4a8ba4a18be8cdfad0e31091f4a1fd9570ef61a51c0d6e111b1859c51690938138d1a8141b97a33c190884424faa712eeddfaf1517058b40b6f042001
SSDEEP 3072:mWPwNznqf8i3iMKao+J+g1MKhsW32C2DOUzhqygYfj8tRq+vyQZWUBbIUOQSakwy:mWwNLqfPJ+ngfyQZWUBbswdTM
TLSH
T19D65EF209C6E81B6A8C5CDC9434C6370C123AE9B9B61F74DDC17A15938ADC7C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ca.pak
Size 676KB
SHA256 8a472eabdc3f30d94c56367d526f6d345ad65732827097aac747438f233a536f
MD5 d9fcb1db7e6b754a8ce0fa3a6820171f
SHA1 d08d78e30eaa0ca60fb26e04726d9bd1f2116748
SHA512 37407233c0ec069de89eeef6998a1b4ce372ce8c02f79f0f246acaf63f7ef60b6c469213177f93aec9b55d86a8690691d73c74d640db48495ecdcc2f58d78a4e
SSDEEP 12288:Y5llu0PrR7IO4yCiX76gpFa8H5PsFBN3Mw2juwwPR9zejm0t3l76FTZKmXCRYJim:SXDre/yoLnl18IM0ahfilziQ
TLSH
T186E408239FC93B7704D2330EFB46C257B48CA9847A16D254F4AF1B1622CCA9CD673A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\cs.pak
Size 701KB
SHA256 5804ba5b76974b48b15922cf91c3e9dbbf549e2d88218dc767e4650520503135
MD5 c81b387a9b4a0ec57d264cecdd778028
SHA1 a5a6ed3dc60fd87e98fe421efed160faa54f0ffc
SHA512 5682eb54fe53f2eca75fc72d497bbf06241685bb5790ca67db5d2bc0351d48b0a6b977daf4c4c6a1294f1b46fd601379b579a5af1f8595cf3d3e97e38dbc262b
SSDEEP 6144:CcaDSJ8LfunUW5A1SBJAxp0zBXiZ8OvJSBsx8QJ:0DSJFUW5A1AZzBXiZ8OvJSa
TLSH
T1CDE4392EEAA36425584002487FBE4128BD5E87140B6EF5BB7CCF9C912575B7E8EF0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\da.pak
Size 629KB
SHA256 57f4637094de41122da569415c16c5524794bc90aa3af226da14703d04981db0
MD5 b041878ddd846f351b5774223e2937af
SHA1 66f577a834df7d1df2c8eb9c3b456e3fc010de27
SHA512 fefeb244924305ac331abc2a128522039fef3dfe98675e5c613831e920cf6534331e6f52cce0134b94f46d8d35d88bbebcf364a420a44e8e27bf2b24c3991367
SSDEEP 6144:VJG+clLFIr9UuFzVmo/QZ5LnhXGej9VZIE/9lxbuwlpqJwWobFwdSpI22VBqns/J:m+LKu+Vxhd2j2sejQ
TLSH
T1CAD45A4BDC9C732FC9A94729F311CDA7DB6D443CC684664F65D8943A09CBCA092BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\de.pak
Size 677KB
SHA256 4919ce127533d3cac698d837306161c00cf69ce30f9fa4b25b80fda171d78f89
MD5 817fd9ad4f98aba26b1f68a345a2ab99
SHA1 ba844647155a16346a7487efb65fc88ce2734caf
SHA512 7a5c3859a2f78b390a69921176190a6451d79cd586283492a3b0ba69e6dffbf678c142e5608af49f2e552592c94515f70c31df85ab28d36836c9b64402458c5f
SSDEEP 12288:Gbui8n4Wh0U3K7UpRbgPaVhN9fOzxt1UbyYC0O:vi42U3K7UpRbgPaPN9W4C0O
TLSH
T104E40713ADDB625EC686B3657701CDB77B19E36FC342312B88DDD02B650B5B283AC522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\el.pak
Size 1.2MB
SHA256 48d430dca8785ce24fc605851b2bb739164b8e5fb5588909329a82e58f6902d0
MD5 90151b874b0e9a258f285d0d0199193e
SHA1 8bb1278b220e9a79dcbc55780c59c33d69833e2a
SHA512 df70ce7f387864e5045d838dd36786bd01486ca02faa09e31ab02d252d576d476a465781e378e24cd4dc6719b08ef167fcd43c00b8bfe8b50de1935e99a2fb4b
SSDEEP 24576:y4FyjdSFbrxq539bk2tGZucYzJXDsS4km7dq7z2HS5gLL0CxNAAyKGyjYHvydIVM:y4FyjdSFbrxq539bk2tGZucYzJXDsS4n
TLSH
T1FA45CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\en-GB.pak
Size 546KB
SHA256 7d3f5c381b1ec39bc57d6cee58f9bd69be9b36aa98ffca0b94e81f4df92e5388
MD5 2e7fa90d4792162ef622f326e5cdc215
SHA1 c8af23d4633b69560c64e5401e98608a6e24c42a
SHA512 12eb5fcfa404f4100b7fadd7527ad057731e0d95aaec36a6d8844b22282af6538fae1c6550826837b0bbdaebbfa159fbaf674dd678383a8fa5b15d15604081a2
SSDEEP 6144:kC15+syGHZjzFoxhLREtHZEsf1+eMP9hhRbyfaY1BLOcyDtBcARp3:kCOsVZ3FoxhLEMHhRbomD9
TLSH
T1AEC44C1FF784126A059351A2BB0AA5A2FF23D07CB35112667CBD801C33B6766C2777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\en-US.pak
Size 552KB
SHA256 74404352908184e834397df60b238f23462e77d69ac4136b4f20af2db6191436
MD5 9ee099df7e2df2080b3525217eb4fff3
SHA1 b040c8d76ac420afc85bbd04979a6f15119e5f3f
SHA512 9c89be421dff94da03bb56662c87a6e8f0b89fade83283c54d8aab4f9556b1e7befccc8c4bb533580362db73bf428bb4304ee0e98b85025d678425cf8a26b2cf
SSDEEP 6144:/4tBJu73IiH33HfJTO6fU3h4QMP9hhbRrfaY+F38SEqjangts/3hwj:wnU73IiHHHfJMMnhbRW3j0wj
TLSH
T1E4C43D1FF744112A05A352A2BF0995A2FF32D06CA35112663CBD812C3377B66D2B76F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\es-419.pak
Size 667KB
SHA256 cd173ec7abdc3609b8ea33764fa8e106147121ee2d262cf5aef22d50fd386fb9
MD5 3dc4187f3a857d580b98640985f6884e
SHA1 f72c2146340efa4bb991be9d87389330ac259128
SHA512 a6aab5a8d44728fd1f2b6a00235a8c52e6b259291fcd1ebc8dd5a02a7e5aca666dffca89cf903f6206a03b8f92bb1b5c4f29a4a782c63eec22e63c1cdc89ae3b
SSDEEP 6144:IkoRBgNb8Ig5tOR8BGIX4qILGYmkoZGG+vpOJD85AKXtIj6V:IRBe8IUty8BGOgohUOJuAPOV
TLSH
T122E4F826BAC81F6310E3A348B743D757E8989545B408D29BE4EB876522CCF8CD877ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\es.pak
Size 663KB
SHA256 9ff88eabacab95f8bbef9e95f63d3619fa8d640ec03523d80abb26243b059a65
MD5 6f1b03ab2fde3f54d7126723e6b7d743
SHA1 a47453a75dc89c8bf81b4f107d9443760bb97c3c
SHA512 3f339feb0a6ab4f64d87f27cc70dc141ce5932dd8dcad5e63add0ad8189500d1cd8fb62f377b499a3fd8cb300136939d75a36a0aff2c10fa34c07a03a5ee5c5b
SSDEEP 6144:bEv1HqZz37xI8zv+1Rgoh7g1Sv+5xt7hXlNj8jLkFhJkav+fE04U6PZCMd:8J6G6vuhGf5hXbj8jY3JXvcF4sy
TLSH
T1C1E4F626AACC1F6310E39349B743D753E8D49549B408D29BE8EF866621CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\et.pak
Size 605KB
SHA256 0292298736847491828465a3dcf04cf4a0d9bd63d4b1a9d183c7eeb389343d26
MD5 46b380bce93b409a65a77f6153c4d2f4
SHA1 b282dfbfafdb06a9bd8e8812f61de84f8585ed26
SHA512 cd1993875ba18946b769fe017cf51c11904a7e9ae1ca571b441aa081def5393dbf332b872bda16666347ea7463b3bcdf549029ac98f721e4e0976db493a7218d
SSDEEP 6144:3LCqMXD5F6vw7L7e2wBzUDa+0HTwyW0unFaYX74zczkemPOTQy8gXKxV1aXtCUQK:EDe+L7eboOHTynFaYqv1adCU4qDP
TLSH
T159D43C42A27D771B242412F9E737E937DC9FD3D8B4000D9668964A1970EEF8C38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\fa.pak
Size 1002KB
SHA256 61323fafa841e5cb977e80d27b2c2746ab3eee7fdeec4e9312915d9e0c45b52e
MD5 1e0adedde900dfb2dba6713254ffc462
SHA1 d5cdce8e96e9352a97bec12f28b6d181f6d1dafe
SHA512 198312b1aefdc7cf84ab7445073b926c94001916df2faabaee9bbc356a504a65f5ade8352a188534bc859c0aed5c2367f4ef8015415e44de4807213d258c8321
SSDEEP 24576:RYegd8u313uyqoz+sw2LYRmXnloThXtCfGk62Yha826JfiVQ0MX44OqlUSkkI02t:K3V
TLSH
T16425A1957AAC9AB15746CA0341D33838C773EF12D349FE40ACB1076609A5B139B5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\fi.pak
Size 617KB
SHA256 0535e2acd4517ce8099aa0a4a3e562af37ca6a699faca1de3b348b8bfacf2a8b
MD5 39b5441e5dc938273b63bd63559231c5
SHA1 63c930a716a528d39aaf7edcbae9e1b459933aa6
SHA512 d412d9faee63b196d90aaf107a7ea0ebf2533538d207b198486631e7f015cb95a1a1c32dd6257d4a6626667e6b0e04225cc7d1553bdbec291dec4939e61c5fa1
SSDEEP 12288:5UyfLb2OoU193RaQ9Xao4pL6Ifp3WamZIR/:rTb2OZp4gId
TLSH
T199D46D915215C32237C8D29EBDB0903AF5E5E3DC8C284D96E843C7D849EE9887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\fil.pak
Size 698KB
SHA256 f9e86324deee168d160a51402588da9987646c8c5899b76b6255d7e3a46a7bb5
MD5 00fd6fe8984219392037af2396af9a32
SHA1 25f670a7c82ea0f724fbc75841732f691150367b
SHA512 e3a9216088dd6ba39461218444bad0891a81dd5b691935063749c0cc56309c42fa58fc3167810166eeb1937f2e84d29aa52e59325b506167aa7cf65043d97a5b
SSDEEP 6144:5zw/03eDcPs/XBS7ZnIehaDQ4rXSg+Rl04pdIaOvzP3YoZHA1rIYW:/3ycPMSdC5vr
TLSH
T199E4D615B3401748DBC352E96260682FAAE564BC3F81786E0FFF26977BA7CD5D270182
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\fr.pak
Size 721KB
SHA256 843d7236fef5375ef08b9af9eb7e443ecafe0593deebc18a45ba5cf67a3a1f00
MD5 c0e77186d2827f0d808e2da67ebf6025
SHA1 c895a47a656398bf61f11bb5984e0b65bf4a4c0f
SHA512 22b8cc6fe23383727141e0dda325f8a8c1621c7f1c6c7eceba60421ebe0b80c981e416c5729ad68373d10e41f248b35b25a02988becf5077750ffc0a9f399e19
SSDEEP 12288:12tkdQbhPgZL/gW84VGbcZ+jGiu06Qua6gV58hZmvTeh0/3SJYnYI8jw2wDVN1Xq:0CdQbMl6V8+C/p
TLSH
T12CF4F76FB9C431CB19C612B7FB16D663DD348248F215E340D89F4296129A8ECC39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\gu.pak
Size 1.4MB
SHA256 34e4d54d66a0b0471542ee76c55cc9d3b27fcaf15cdf63c3d7e7b46cfdfb3f4f
MD5 5fce925a1a47c2258e4c11d22461eecd
SHA1 706fab7b309cb5cbce013b9176fcd8f8f4dd3bc1
SHA512 7335e508614a9edeedd8e851dbb2d11331d3747ae0235c566b522ebe13dc5612a52c64967c45592d7f654bda44e309a28952522ce23262875a3dc46279abdea0
SSDEEP 3072:4tsY5SqqKzsRkVkHUtvxiD7viUAA9UiPjAwREJKVMjNiT7llj63rA8lDcSi5NnW+:4tsY5RqTR0BvAviUAA90ws/h1CL1KsoK
TLSH
T1526518D0D3B9F07119DA9F7E819E512086699343D57E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\he.pak
Size 877KB
SHA256 75fbe196eda1791775243822da4e7f9737710f627b6ee27cc4c6d975865ea7cd
MD5 09eb7fc5619ade4339b1b6a15de0f40c
SHA1 4a3dfdaafe0260020a737207660f2c2540e9f586
SHA512 47b5526fa00d2f4405d138a0377521aa54399dffc2aec38517b865cd9626d136f8a8a02076daff23a8f62b5d06854e496e1f02d8a3536764df5274c04cac9f15
SSDEEP 12288:uaIhc0qHh/aPAdcOT4E4xu/rwZ03nWq+/TBNg+zaQArrXRQeQCajvMzf6Wa/A5y5:zVH6P
TLSH
T1081599C4B2E492255131A9C39FA9FA285FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\hi.pak
Size 1.5MB
SHA256 7557c5d5b46c8ff4ebc159bbdf0477d28e4baa7c3bedcb947d59028301ff21e6
MD5 54565e8da60d81d2bdbb916a9991aa39
SHA1 6949c49f82c74e379cd50e9e80a633db2ecce4f8
SHA512 6b6e9c4160866da6fa28f7f20e2ce0928745f4bdd6f23185293ad63b26b62a4f16c477c67061907505b549f3151379367a57bc3fc41384999c1d948a3875e2c0
SSDEEP 3072:cfjn1vOt8UJEtcZKUv2Vl8zPJd2lJYR6V5NV/B90ZV1dhuBlOvXoCDtDWepenPsB:Aj1mt8UJICOVKVdCQ6e3g46SdE3W
TLSH
T1DC65040CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\hr.pak
Size 674KB
SHA256 9ef77921560c91e5d6e42df6504589b8b7efb84c9b5119ac51e9a10d8c83a089
MD5 250eeb9dc43c98511b01deee4f6e6a2f
SHA1 78128ecb1848c8a8279167c265c86f3e31d98f9b
SHA512 1c87ad70caca770deaf1ddecf1a74679b79634295606fadda463d7f1e23ad586032c28bfaf497eea55582e3d00de2edb333038312a7432eb88ea5b5b117831ef
SSDEEP 6144:56FHwc6hxI/g2+iLkbMr+EnpXVOWuynptu:5oKIo2x/t7O30u
TLSH
T141E42B7DBEF3570A0897B24AEFAA43547DBE08DCE56497B7684F522E0003F4C6AB4149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\hu.pak
Size 721KB
SHA256 31e407f43bbd0cd0692755f961bb39d10af1f9f0af205455dd70fb4c7eeb85a5
MD5 adb5a8e932893ea20a9551c2bd0acfad
SHA1 19cdb783a41fe80c4590eaca5b5bec2254fc2e88
SHA512 5b0771c622b64841a8ceadb04268056f1e90d69cbf68133fc07d8d073a36eacf1637b64347905789876ac858e1ce44cdef8411fa5b3cefc858b520c45bc3ee31
SSDEEP 6144:c3bE8BltK0jrT6jUJHORxGXlH2N0l/gxAPIpau185n85Z49KadYhNTPLsMKc/beW:oEuD9WAo85n83PPOVrWb
TLSH
T157F44BB79376944ABC6C179778643F16592E481BAB2B31F72883846D34A178D0DC3CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\id.pak
Size 598KB
SHA256 e7957c9c58f890b5d053ea50c5fcb4b66cbc3c47478c42a5962810cb15814249
MD5 17e78911ece04f7367d310e0336a1e7d
SHA1 bbdb669cdfba585744ba14927b2e92d7d4973d85
SHA512 9bc86d34dbab4b0b7990aad19c79704cb0192da5a85d190c9b9355c45d5189c8557895c0bdce2cf87b13155553a31907dce5c9d6dc2330906bd7f2b705b75b26
SSDEEP 6144:hXLc8FlSuh0KBS2ndNklJ7MmVVgxffTTFjlFD0mBWVnk6FpM668WhB4Tm2iTvP/x:F48FkuhhMlJLe9TFjlFgmMVs66Zvp
TLSH
T12BD4E8632ECD310C194842D5F2DEA91E7CCE233BAF05B76E8E348F7055A67686716B90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\it.pak
Size 653KB
SHA256 4b06d5f8a4f75b3122bc3f1c54af59eadf6117507758d4efbcb5f1f88f322e61
MD5 572a40ee726e1715be3f0791b1ab5164
SHA1 643c3dad45ffa054a4ddd23563df0e4afcc89377
SHA512 825e49d01d8d5629b7d56289e7df0d547784b048c54413189cd0dac9b26390b00a7308b7ad5bea4ed2340c7d68f2513ae9b52d08e5afa187e09ce9230c1af3f9
SSDEEP 6144:uw4Heo8xRky64WmLIaiXBwj72NTaUcSbmCfEs61ltUVbjhOebaQcrMqpzSj9f3wm:uRBYTWmLCU8yEzfSaO285lLpQ
TLSH
T1F3E41B3AA9DA212559876359E611F085FB6EFCCCFA41721CC99B031C22CFE44E1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ja.pak
Size 796KB
SHA256 89178f1acd5af747dde41399ba0c1e229eb53e2800d4b15ea2d9f3358e69edd3
MD5 7fb5c31b15dc526f3033834a624f32d8
SHA1 bd36aae3f1160351faffa8458b5cdc5e6c09a736
SHA512 49f8ac1507acb0b494a4da8755ac64ebc62afaeb3e2c7ccad1ed794fe7548ae098ac29d2a8d42c18db496b4d7faf2e90b66b7fb3d91ed83b084f4e02b22485c8
SSDEEP 12288:7nN+sDTlRtDDDaoHLvnZOQ2J/rCjhKjd3:8snJ1nZX2J/rHN
TLSH
T166053F7CE3C969369D6153A22C4E36E17506AC5BFCA23A3A443DC074BD70BCEE415AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\kn.pak
Size 1.6MB
SHA256 9744dbadbb7c31cc6393a0682daf91045be270bab934dff7dbad79b76287616e
MD5 b3783a9b59b5e6a2c6fd95371b803213
SHA1 ff155cf0972233eb8f623df42c2e5ae22d040362
SHA512 5fa60c33e634a335ef3f4a2121653ee5bbdbf72a7f8b918033ce547cf4b67840d91186b76610b3b975ac83965002af5d0114a30d5c2b3ca88e97ee7e011189bc
SSDEEP 12288:I73RiG2L/DzVSBSWvaKgfLbHVVR7o7WR2Mn40WWF5J:e3AG2LBoMF
TLSH
T14075CC18ADBA7D311BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90825DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ko.pak
Size 677KB
SHA256 fa24cc7d4089c81247ed9d5e81d8b67890a09a82ff6d450fe94a654374a2a46e
MD5 29b3a56692a86768902b426722d1dda8
SHA1 25ed640c22e0fd38ee651a1a3b57cd0da2ec8d8c
SHA512 9bc2a2ef2a618bfae695dbf29700fd4e690f3084bd74973221c8409f97c26966d44cfbee92663ee1748a50d8baaecc0ab2f8145870e3974c6dda76635712987a
SSDEEP 12288:DGfggbgcpb+kIM1WNiPszcbifYj4ZGRyrD1IF1gwWOXCcIJ/xESJGBG1KLhwFHeL:DKnBKIE1rE3GhwZ
TLSH
T19FE4B5F238DF63C91193CD82AEF4FA198382D976F7530294ED44CE449E145D7488AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\lt.pak
Size 734KB
SHA256 bc5d99751f1b252ed074bfc4bf6dc94321b3f785a0a0d4300209acae40220f74
MD5 a8be0cf8fafaf996c10c5dc5a808b6bc
SHA1 1f759c0fe979ba2cc55450e348a5c0e3a158a27c
SHA512 4e26f0902d71beb6098c4b403268e452d27e22711022362615705127c401e1d2a21eff5dc1986d8f20d827f4f622cbadafbab9658b2225f49dde58a202fd31eb
SSDEEP 12288:kXA3AXEMrmBq97MCUl2AiMWmshNp96StH:MA3AXEM4Vi3msHpp
TLSH
T1DDF42C0069E3AEFB9A4467C981A4CA74DEFD50009727BC61ED69C78BC43BF4625A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\lv.pak
Size 731KB
SHA256 e91342ed84e1847968b40194250b4d76bbd2ea13133675b8b099dca45ee0f197
MD5 8e12cb07be6636b43abee71905887578
SHA1 bc0f96e91933824e05053b18986aa7a1f29b44a9
SHA512 6866a95a0ad90b908328bb7761c4c880f6529eddb3f230aca5887c8101555f6a4355a6afd6ad1c5eb1b5da2732581d4efd7bd453c008ee417f178e8c145cbfe5
SSDEEP 12288:LgV9vjUN9WUEPQhcGKA+rB4mnTchTeRtZ+tv:CUN9WUEPQhcGKAaB4mnTc+twtv
TLSH
T16AF43A959AC68FAA4D904DCB7336D133A8CCD740FE07E112ED798B3A650F52422B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ml.pak
Size 1.6MB
SHA256 b813f87ec80ffb496413949ef7bc8208db6fb7ceaaf88145f160bf8abcfe2f01
MD5 9495ca6abfd5649b9a9c5001d1fe2ce3
SHA1 e66c3c28e9dc48b6d8d12ab2fa1de8a0dafc3840
SHA512 eadebf3dc82c241411ce0e5211ddb8949a6a96a5cc18ced48ccbe8113e9900e5764d8f227bd5ed483eb9448aedcce3bf4d76f53f664f00158e7daf77021acdfb
SSDEEP 24576:P14IL/oZAuuxyYl+9y9XBkx/etz25KfijHeBYJzXsY+v2riTD3QahWjW3y:P1c
TLSH
T17C859D5BA436CD3B0FD002167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\mr.pak
Size 1.3MB
SHA256 fa87d519a8545b2748c52ccd7704b320877b2d03385991ceabe75c2745200331
MD5 e3e0d59887c06f04cb8eeb560f8cdfe8
SHA1 61f97257632b504a870d163cbfdde93d3c6e75e9
SHA512 33070811a2517b09d4a4d8a38f2a4bfb83b790e3cce59a297707fcd368cca3f57dfe6c44de14d4dc328575618e1dac15b4ba51d19b95ea61ac7688a51fc62b12
SSDEEP 6144:7hKo7yofVgP3UUKg+XhiiWUT3maPIafNCsS3mvycy6:f7yBUnJwafNCsS3mqcy6
TLSH
T1FB65C24DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ms.pak
Size 629KB
SHA256 2ab44645c1ed7b68c9121ee0ab9cdf8c7b9d1721d131b08f258b8a85b8ed0af0
MD5 9f0163e9f290339a5b50030f21f9fd83
SHA1 a0008221bb59a32c06165583f6444567695891ff
SHA512 02d677341b76d9974bf74626970baa71d145baa6a13d4609f5fb88d9130406486973c1acef69d0234f134f4da8b069e7fd5c55c67ac3a5c034bbc39e09c917aa
SSDEEP 6144:3MoNgXwgvIUwLRtE06SEhJHuqwvhQ8cNL6l/nmJUlECCn9kk:3MZA00SHuqwvSIXlE1
TLSH
T149D4C6579EDE3118085843D9E2DEA91B3CDD3332B705AB2B4DB08FB0166E7A53315B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\nb.pak
Size 601KB
SHA256 8eaa23c418a3fafb9e85b5445e73fb2f5e13be1f033ff2487c4081148aaa2f4e
MD5 327b5967d7699fec83649bd90271e957
SHA1 bd117f91af26488c400f213e8d30e03f407abad5
SHA512 5d0953136272834f87def5738279e2e810844b37a843550e76773a13a65cfc4e8d47c8b16936c52c3ba5acdf7df337bff8e46f4bad131a2804297a614b29105d
SSDEEP 12288:tsGCAdpZQpLJ/Op7fGQH4fDcc355Blxuj2GO3:tsGbALX9fDccp5BbBx
TLSH
T160D40883EE86B72EF6A442A4F118855B9B7D943CCE98199B54D8C63E0CC7EF051BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\nl.pak
Size 627KB
SHA256 432dcf6ae7f418986244ed3c953aa36176fce7218de4e48158213389594e7dcd
MD5 69c72c06fcd823f1d5391265242d47fd
SHA1 63fef1026cc4a06a99b16c4121e827a8645f57e9
SHA512 121adba82297b768f3e876dd048010614d4a8e433b059b0cc669a3fd2d660bed3a6f0d23d87a5c4efba0762bbd18288d6885de96e33d44d5ccf5e5076a4cda91
SSDEEP 12288:/fPtUECAlbJWQusgUe5Fg73+5cF8yRv9qH2GcJ:/3tUEBlbJWQusgUV3+5c+yRFqH2G0
TLSH
T1AED4F907AC8E253E59C0A349FA098FBBBF1AD32CC26CE67D94EDD5341443F6841AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\pl.pak
Size 700KB
SHA256 5e47475490d1514e3670c44f55a2061672c8e7f6219211b3d907bacbe5aa0a5c
MD5 2e771e90cb0aa444036793b40846d653
SHA1 8924e0def0728487c04dd7504d401cef39dac29d
SHA512 cb0abffd3752132ab14392e0b446cfd5f6ebb7cb517c5135a6b63b8b78c3ce9e40703cb5a726b239b09618269c63aa4c1b52e4af2c12ca804905d5186b0f7762
SSDEEP 12288:7k4KnG2tfQfuzSJQbZwbrfEPHCUdPe3m0UyRMAmo1QhlhNR6pol4WMd:7kxGLf5RMQ1Qh/w
TLSH
T101E44A0E56E58A4E8DA008E6F6E70B7CACEDC808F108D35FE46F4526715B19FC9BE584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\pt-BR.pak
Size 657KB
SHA256 0be502c6b71b94ccd76b30a0b8ce3a816d7223ab1d4c0a81c150df0cf3fc43f5
MD5 06181c64ba1d52327f2259c7233aad35
SHA1 933664726f5de5e75cfed3050815fc983b870b66
SHA512 29c951aca32ab0704ebad7d1ee37c867afddc383bf1abae1839f9f66af24537e181e1a2e37f078c9c60634698d47f62e9fad28614c49c5327c13d2b5246ccfaf
SSDEEP 6144:341uaN0vd3F1NBXBLEeamTNyO3AETy7oGnsRoU1bb:o1Vy2mSEJWsR31P
TLSH
T1E9E42B2E6DCA136604226350774EEB43E5891745FE0ACA87DCEF4B06A3DDE40D933BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\pt-PT.pak
Size 661KB
SHA256 98daa1072e7c405e3f5e030bfe25ef1e12b31a96e0b1db245d6805a564390f75
MD5 e822fe7d1510732825f459498290fb1a
SHA1 f124d74d6c0ef0c0cc91d0fc3730249b216708f3
SHA512 919dced860100cfbf822278029357ec63f3fce7006564e8808182e659bd5ae0c1ce072ea49abf37781cfacc011a99e2f14545ad34aa8ce9646982df8993b6c3f
SSDEEP 6144:tifQHbMZOh0ARCRi2uJCieJVJJxhLw/5NSWf8YhnVwRYhSRhB:cfQHbMZO/rJthnV5hSRn
TLSH
T13BE4182C6EDA136605135341770ADB03EAC86645F80ACB87C9EF0B4272CDF94D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ro.pak
Size 686KB
SHA256 da5c79d06ae972aa460724ef378f91bf4afda911b167a896963f6e0d4daf9aec
MD5 48219b6c5a69bafd975625d2da3336e1
SHA1 84a6e7793031af8af9febce898cf9655c438473a
SHA512 1e084801d613147a8d9ef23558bdb15bf0298679cf89b7f4076e87b37bac21b5d60959c05f2708b947574b3b6a11a34f2e7d7b8f24da59899eec7f0aa25e4566
SSDEEP 6144:giDlFSlj7Cx6wM53WPBJfGgnyiirQkAarGycOBCdK5w3/s2osWL/FrMY:gi/SR7Cxo53WPBFPyiwKcCE5eosY/OY
TLSH
T1E0E43C23A1C81A972D5152B2B73A24D3EC8E105DF641E28DA4DEC97910CDDDF852EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ru.pak
Size 1.1MB
SHA256 e4236ef1cad608c76dc1594645c345feb3459f8ccdcdf4ed2f5b33ba188dabeb
MD5 ccf5ca4f66b84adaa64b6b13b45d8100
SHA1 ab62ec74d50fc10c7fe03fb8424e3429366ae609
SHA512 b391cfcb401e15bbe129eb494dd4d3798a077d3f2299db76fb5825cbe7e5f7fbe9b92d8fdb46d81c5618a7cd1b6cadd5a9f607c7281fbe679c581bfbc7da50bc
SSDEEP 12288:FcjvumRwkDhhA/fQeRo4YeeMObzJ9sF8aTj+ZQo6HzW/ZqSvYsqCJKkEj/R3Q8NX:Fcj2mRvxfo59
TLSH
T119357760669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\sk.pak
Size 713KB
SHA256 ca41ac3e8b3352f1bdd66ce54afaddfaf86c1cebfd5bfa3e82a23bded674a83f
MD5 86efa911875a42264a50d61063932d60
SHA1 992d87b3121158866e4a07f487b481dfdb4de067
SHA512 f65083d4bd63f08e3debd5e5b13845488dbc776b56c05804983280932f10ed5086d92c3535e9df8d89189b33499de876ac6ea9b703002af845aa1b29e0a7c26a
SSDEEP 12288:eHwzQTr0FucKojAI3OBoiIJr2nsbY1XlJpTjsxt9wB:eHyc6Uo6BUYXYtaB
TLSH
T195F45D7FDBE7181E8E8D0148FFEA7110FD6E8650864EB0A5944F364724E26EDCAB4E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\sl.pak
Size 682KB
SHA256 2bc385d457dc844794f9396458c4090e6233afec5a08b4a5a92e45ef31e07b78
MD5 7f5efe708fdd9a2022af9081dfe2193d
SHA1 fdc5cfe26c59d1cfea3df709cb6695cd8791307b
SHA512 7485e14a1cd10ca28651b9363c8935b20b438cbdd9c77f34fd0d98b159c19567917787fea10dda5a6125231f51d79814c32eae9b2fbfdb86694dcc1277dfa6c3
SSDEEP 12288:o+XbapXutC4rZcB2KDRXgSWHFxJi/fzxMJql/aA:5apXijrIXg9HBi/fzxM2
TLSH
T15CE42B397AA75E0F0C9AB2CEFEA206107FDC044CE251E6A1FC4F336A5415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\sr.pak
Size 1.0MB
SHA256 c3b4a5aba1e86ea0088e5c33002bb055ed567840b2859b277014be0a7283013e
MD5 f15516a912b4d3958e34dc078eed2849
SHA1 6d5af2127f34cab240a295f4cd456209033193bd
SHA512 43bd493444e00753e47baa3a2206f18be8c91e65bcaf1fad3db0f1e1d1a788bded8e7b6ad1ea047155899c35241744ba59aa39260fdc774b0ae4a85a47675322
SSDEEP 12288:vKkdRtCl5ytpmIMdmSldRnCY1i4zFJKQpMsh1PCoxVfP37VuuJH/k/p:CkdbCX7zCUa
TLSH
T1763556B19B9E64DB0501F41BD808BE4A3DAF41FE3FAB975211601DBD34E10B847B929E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\sv.pak
Size 609KB
SHA256 3af85c15ce3e76344404c37325a60932ce53763539c8cd8b3120424f709f73de
MD5 6aa60b4d011fa4eaad33c81c241b2586
SHA1 ae077d7a8cdd9900e65846abeb9e59a05e319026
SHA512 48589812bd89b945e571534492aa5f9dfbb61764ac8a799c4f4b084de9dca4c989f35d85c9c9c8c6a8e3b38bfaf62f90525b2a93cd25075aceb9729160a7e2d3
SSDEEP 6144:hUVc3CZJTOfZ4iVEffYwn1oFVFBwUxNxSQIluSwRLkRRFczd5RtGmIe37MgmatSD:B3C3TY4iCQXx3Ni8yT
TLSH
T15ED41B438A50F526FA72530DF608115B0AEDE25CE3F2958EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\sw.pak
Size 645KB
SHA256 a806d782b21930ec6243b8e5b393e7fa970ce9d297e96b02e6596fa6ce6c8a86
MD5 a8bc8fbd29867cac98603594c45b4a4d
SHA1 740b6a554114fa56d40ba2218b7ea909bd1a830c
SHA512 cae89812bbb6a17914e707c56651a75e1667f93362466b0ff9c8ecedb94dadc763d88b8793087054b9ae1f52036fd6046e06524a68bdad378726f0aab584d65f
SSDEEP 12288:8/ymPZHE2QuOuexGQ2qjOWd9rGIqg5OmedqUBjRdpgaywd+cbiEpSLjGJFGSE47M:OpPZH8hQFCiIBl
TLSH
T1E9E4C6629CB1D1191233518A03DCFF732BDCED5C692B29935A46BF0F218F48C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ta.pak
Size 1.6MB
SHA256 516660683214c01341300fa8d15c7e39aecc38792b76fe74bdcc464024f4294f
MD5 8f4dacad627730913799d6610a54cdc8
SHA1 7ef0222a459e781b47e12cac964cf25cebc3c16a
SHA512 09f41389c43ce33a3cdaa77d487a1ef806f635d4f3d8f760b03b24a72d782c290ec074ed7f5ef79e253cb582542a7f384f90309e0e44d74c0f06406506ec8b9e
SSDEEP 6144:JCZxLlT05Lta6k5rBGPGKqatRoHtm1vYpiMyB:JExo5taTBGpqdtm1vYpiMyB
TLSH
T1D3750BCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\te.pak
Size 1.5MB
SHA256 5439181ded31f8cc5dbcc1eed358753d4b7449ad29380baabe4cb893d8751a06
MD5 1ad6e40410015055cdd8ce9eaa5c7657
SHA1 931053efc56de20dc8d360b5cbd9a224900d45e7
SHA512 b81d7e1af85af809c133932637799ad3ace90b5253bad0a859bdf4a493a2dcf4fafe5bcb8b84205c5df950b631e3fc19396f9115d7c97045c5c58ac7f46613fd
SSDEEP 12288:3STFNdDlD7MZKNby4cE1SF602ZL6gIC8ymoQRT51bD+52CMlRWmB6PS3p1Fqzh/L:iT1DGwbkcJx
TLSH
T1077592023A6AD310DBE60273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\th.pak
Size 1.3MB
SHA256 946b4a45a9d43b15359927f33307fc35f50d7e880f02890b07bdfd1160f2db59
MD5 a5b725c3244def3ec90dadfa3c151866
SHA1 b81b482e7db57ce30e3060dbf1912a79449fcba9
SHA512 0a8d67354e46d572f21234c165db69cb6acad6e741140e26eeaa16d010ad98c342fb9dc01d9fbab94d0a4f921f78375704595bc2ac2cf348cad87957f8657091
SSDEEP 12288:mLDaTE65yUvN9LyZYAbzALaB6s6ouhCQskJUsewPsO5eXwpbDFDS6Sud2mKHlJjU:EaTE8PpMsV
TLSH
T1EC554BB37247DDD479441B5B262A7789672DAE693F73F8E00089215A73F071A8422EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\tr.pak
Size 656KB
SHA256 98151ed08e518b76f33cf20926717e0d8e28d8e4eb111e0c6e33b95c8acaa99e
MD5 1c788639342b4654fcfb4bfd2bdac22f
SHA1 7d06cea56b40fdad780cdba7d9484a6a2426b887
SHA512 52416a0d89f3b10284066815cfacf50d819094236b83969c72a04ecf96b33914cf5543aafe0e3bc6336ec2a5f5694d0164eefdbe6b5a676c7a9ff8557da2107d
SSDEEP 12288:oB59CnFZWaOGHz6sgwhqlZFkgGtI9drH4k:oBWPGII914k
TLSH
T1F4E4FA8178EF282C8BB9278FD6E90666F89F0766B331F4469B168636774535703E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\uk.pak
Size 1.1MB
SHA256 6cdfc2782df67c0b72962fc62d2c2eb8d93102255115dae093dde530e345c643
MD5 78e6a1bb86bf08e81364dcdf47f4134d
SHA1 11860e09039dd058945270404e6a6c0164bf29ba
SHA512 b866f83223e61eb6531fe160c52d67bef7b49a116bb6e748c6e2c2b900b9a00e31be4c1d24312674b0f0e85ce6c3e69d279a7e1d515a7613209ce0909a525a4b
SSDEEP 12288:e/D2rCLhl3Ng+QKjbjIrwk2zeNQUhuHsSr+UCnJSB8hQxBCSOo5NndaA6Qvqz8Wg:cDeghlRq8Wg
TLSH
T18A4599A19AAD54DF0105F05BE94C7A0D7DA740FE7FA6871625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\ur.pak
Size 986KB
SHA256 d57cd219249e207d34c21a619935d0f0a7814a0ccdd36051a42400c60a599e47
MD5 dc42faf460b398e953b2ccb2cde92697
SHA1 ab3811f4f0e5341116b124734c48bacc615ef92b
SHA512 98838ee7acc6ed57f1635af2924143a917639908561c262ad000da0b0d629827ab958078af7c2f164b6d410ddfb59df634dcfca91eb4fa0f520f15bca8e7b579
SSDEEP 12288:F7Fd/iUuDDy8PLDLqtdQQS6daywsMfvTFgfAE88GDOJdeQYrjwYjwadcJKwUluEG:F7FdIGGUH
TLSH
T1B62500D2A6BC96B34A21D92780D33C34CB735F13D34AF285E56246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\vi.pak
Size 781KB
SHA256 37f2c01a308ad8bb93d9525d81480880f97d54191dbe7c1c1e75aa9fcf009450
MD5 ffc5fa19d6e85eeb94fd03be613da7a2
SHA1 0800c629fc49ee032f8ba8341396628351437e0b
SHA512 2484334af1e19dfdca3ff806132dacb1d8415a753b3118150bfd5113522cb533c2e82df5bedf2989bada7d9f1b6e1aa1dca3112a6b7c24850feb651bbbbc6842
SSDEEP 24576:D7+cYCVP4DMqoCsEwmC6lrTiOGNoq1ljx7:SnTipT1ljV
TLSH
T18305855216D0302680AC553EC6CE540D6FCEE42FF7C08FE56FE429787A221A55F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\zh-CN.pak
Size 558KB
SHA256 e2c2d278e66e1cd806f707259fabf8fed43f0e2e04edb23e4808c46fb872d8d7
MD5 e2d472f2e5cc678d1ce86f66e64544f6
SHA1 70890a3365907e4691bf61910214153c5fe53fa0
SHA512 2bfbd4ff10094c653e5fd7eb088dd5c64db6827742f45f7228f4a5f0b866784a3b6b60feab893c351e936d3b3937cb491604b8284dba87f684adaf1bf3b6552c
SSDEEP 6144:zde+VWlzvkdB6ExlnE7FOUwr4LJ6l029CTSIloUaYZDMG2Cy1xK1ylE:QHO6E3ngOUVLJ6lDseJvYZDMey3g
TLSH
T134C47DE420F9BDEC004A90E13729613D7C40764BF62BAF366ED248ED1A95FAD0757A07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\locales\zh-TW.pak
Size 551KB
SHA256 f4c2f92b0de0326377b7d441fab0fe7441ab3d09c188c530445c210a88377234
MD5 8e54f4ef546a3bbd784a5d52a7022dad
SHA1 7225962e593242681037a93176d5443f390f1812
SHA512 95bcd247bd026524e552a858b207416a3495f41e449fef1ce8f601461deb97d14c91e7924fed98e900f69fa12df288e52276d6ff2d43e1317a7df3b955fa690e
SSDEEP 6144:UPaXw7lc0FeKQT3ANC25DBz6JxVaMX2BuAaNJ+zSLHtD14/tt9aUmQhiDcTZ:GVc0mwJsVLmaNJOSLHS5v
TLSH
T1B5C46DBA1CFBDBEF0901F484B7C9913BBC8B382DDD377636FC4918981E69A5809A1145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\resources.pak
Size 6.9MB
SHA256 b88115979b34be771ce2547a550cc46cb11fa19882e02f54f84a5471fa94f9f3
MD5 3fd1819ea2ac9374eb04257a7145ac62
SHA1 4fe1feae3d11d83eab3ea6e1ad992ada7021bf86
SHA512 aadde24e841a55daa962dbeb6309a8f9c987ac5bc3ebf5a3811d6fe96f0d5caa61e196602bb18af49d903b10d237256680f08e3c9ab027dd771d51119931286d
SSDEEP 196608:/7l6q7OCWzfzsET9x3GBkrR9NK+EHB3wBi3cGiklILmzuL/:jr6C0X9x2BkrCpcGlCqSj
TLSH
T1637633D372860C0BCE44537E09198B36825EEF6535E7B09286CC629DED6C76E5F82C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\resources\app-update.yml
Size 172B
SHA256 ff275def080229bfc8a75a08b67c072cacdc7a538fb01104c3c2e6a89e741e5d
MD5 e81065fd5f6794d7f6ebd7b7f54fa3b0
SHA1 0efabca6314fbc164dfaba5a85dd5e9fcd5d16fc
SHA512 832a6d3399a6890b7a8a6094939c7d1ffadf2a47b6fa78edcaf0a27386cfab6a8d3d4c4cbd665df39afe0289dfff3a0b7ca4ffdeaeec96e883708368308d5d16
TLSH
T13DC08CA0D611EA388231492CF49CB47100CE6860EA230170D8EC4688A80BA5DA9CA6CE
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\resources\app.asar
Size 47.5MB
SHA256 0cbd6327b8b932c73d445e0c3b86860fe7b219d70dde25e5e395ff5e9f1be364
MD5 cc8ce1d1493334a925460d3f9a529e32
SHA1 366308b8f1ff788eef89c26bfb4b301058b2b1dd
SHA512 54202c089c211edc9e2431b26b2db096bf750243a9c0d312e2241a789b2e64875d498d29377c38cfec0238c207a7e5694381737640f3c1633a06b69718b7df98
SSDEEP 393216:gXnlnhTUjIGpnrMD5Ok2Kk7ixSPsrc5kS/rOsjdrag18:gXnlnhTUjIjD5OsF3w5NDaq8
TLSH
T1BEB76B1126BB91370B1F2EB716CE0042AE39906F790498547B5C87587B90F29F3B6FB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
Size 132KB
SHA256 ceb2210260fc5846582030fac047cf70fa012beb080d1b4c8c1ad0e9d2fa9783
MD5 27b2b2cc686e6c4871cabe03d14c3db2
SHA1 c96ea55b8755d0389fa092eb5761dbb43d883fe6
SHA512 38e07856a3300cb54ea50340a0fc973db09d357e600c75234c2c40ce0814e73aa6be4548105ee3b40417d4578ea42f5e95fc226887c5595194767131d53b5d80
SSDEEP 3072:7xaJbyNvsuUrt1J0NYRaHaROx52DIKYlI208k0Db+jek2/rv:9aJGFurtbP0jrlFk0mak4rv
TLSH
T1DED313E684C35EF0590256858EC9D07BDDBFA210193D99C0F8E4872089BFB1176EEAE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trayTemplate.png

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\resources\app.asar.unpacked\resources\tray\trayTemplate.png
Size 535B
SHA256 4618ef51f1bade1b1f3662a0a28ff63a9534944a567ee9f815285cf9866a48af
MD5 501aa372771c35c7fd42d50a4aeb352b
SHA1 b907716a586a58b42420022eccb738baf96e27b7
SHA512 05700e1e0bab50290daae05340c993614c910fc046983b47d778c25ef11f2ef6c6a20647eef05af227a1c11b9aeca24ae2560eb0a5d2b6e68567fef99d78ed60
TLSH
T1DEF0C0D29331F6F1E507231241103601DB3A3B1B17174E9A7A69F6950D08F8C5568F96
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\resources\app.asar.unpacked\resources\tray\[email protected]
Size 787B
SHA256 5b509bb2dc0ae257405e2c35dd62138f123decf424174b37e99c9bcece79af69
MD5 8e94a08e3360ac8a83b100d70f1abaa8
SHA1 829a45d4f84576d50f440fd8781a9ad016fc54ca
SHA512 f1e555a1002c50de637c41842df96c1e4963b23cb8c5e0daf76f019648ad35a2aa07482a5ca288d32e4f71786f91d0110e468005a2b5d28be3b6c23e1f6ec866
TLSH
T1230125E1A5B3F994C8032EA2F9175340EC226E1F532D1D187E07E1CF4D18DAC91223D1
MD5 SHA1 SHA512 TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\snapshot_blob.bin
Size 356KB
SHA256 f625cd2ebfeb3e78afab97e0da108426eca24711c15995377d473b3dac9768df
MD5 5aeeecb6d13c2208ba6c266a31578b17
SHA1 8488758ea637aaf8eda1541f88fb0c5031763036
SHA512 55f466c2a0fd6df63046006031ee4ea6a0edaa62b1ea132d557f7a2273986836766a830484375531c22073758a293549d969fde484c4b5b30b01816be66d01c8
SSDEEP 3072:9iOt+xbRt2N4R17+reypQ08YCP6WXdkAswEJw/kKKQRFdN6nok9qtxqIJs:/t+Hxpi9kEJGnRzpk9G7S
TLSH
T16E74CE12F709CE26C8B2267C8DF5CB942E34B18D9E99AA5B314443FDB4797640E2B34D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\v8_context_snapshot.bin
Size 722KB
SHA256 4872a09b92ceb55ee3ebefbd6123652a75efa7d97f9ea3b41fcc2d5c8270a6f4
MD5 3cc9baef9dfe6b8234e8432d2dc329f7
SHA1 d3db38831bc30d986d667fc70fd021225dd3b67f
SHA512 1bb146bc2e2b79b2c029b8307eb40d8aceeb0c46194c1ac6ea17c9e1fc1e5c8158dc6eb044aad41031126ffc308939c6c7c70754508a5a88e3c26987e1c4edd0
SSDEEP 6144:it+Hx5wkEJGnRzP2N6mXJp575pxLGT4G74UA+xCY1idJy1kguuJN:SkTRzP2N6mzLVSVA+QfyOzS
TLSH
T1FEF4B7B5F70B8E36C8B526BDCDE6DB463A34B18D8E86E507304257BC74B87744E26248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\vk_swiftshader.dll
Size 5.3MB
SHA256 be32093f330a57cc3bf31ae4e32c61ef0c6b751a9212d1d8507fe8394e2f2859
MD5 fda599a3017cd23e28c5910b95d05704
SHA1 52a3567a02fe76601e86b778ebad14195ebb8e55
SHA512 f3a2e157fb02b61449360899cf2d1c8edbaeab44a6ecd0bc6560826645909ea0ec88b19861d8b5d7fa20235adbf0e467d6be016b8441575d16f7c420180783a1
SSDEEP 49152:wJlMpliQEtj0eoOaZJqUSR2j69M8hc2YDZEEkNrBU7dx6kXDRMetgjxBhruq1iF9:IlMpAdWntllsccs
TLSH
T195464903F68681D9C06DD5798B5FA623F631F8804B22B6DF56A00F192E66FE06B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\7z-out\vulkan-1.dll
Size 902KB
SHA256 f7d669b9239cd7a460d609cb60c202dccac5253ffaf68131cc09c969fe59334a
MD5 d2825394f5b78db76661714ed4c0e305
SHA1 a334fe9d44b26a8706b3feafa222f37aede5381e
SHA512 1c02d492a71a0f15372ee978daa8e100cb87478648a5159f7e4927fd6320a2b35670932667cb08b6af8e3faab05ee1f7587f2caf41158cbc27ac446232950dc1
SSDEEP 24576:zJn3wkUnhLMYZxFIgnee4AQ6Z5WzcADYsHkDn6g3P0zAk76oOHvu/K:Nn31UniYt14AQ6Z5WzcADYsHkDn6g3P3
TLSH
T1A6156D22EA948A79D676C034D9D18A0399F178C11323B9CF06B817147F6EEF46B3DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
TLSH
T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk7E07.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75f41576c9ae3be19e5af6091a7fa867

Path C:\Users\Admin\AppData\Roaming\.sklauncher\assets\skins\75\75f41576c9ae3be19e5af6091a7fa867
Size 2KB
SHA256 fbbd809f85fa5de84fabf3586b0d08025d5b4284378b566be9a401a6d9f06e26
MD5 5d3e397289079fc42abe554ce590ecf2
SHA1 f1dd030e4e930130c8b0659fc7fc0d837bb217a6
SHA512 a119e620834533f98d93d5991dc7a31cf0d8f44338e8e161974689c657f2c9acd90fc9d0a95607a661fef05c1b1b31335fc67d5c04315bc11cde3e7defef8be2
TLSH
T1FC518EDDA483BF54D729CA6288D030978FED17359238BEC1441481901092EECBDEF89F
MD5 SHA1 SHA512 TLSH

Submit Download

0c150219-d963-485e-b814-681171c066d2.tmp

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\0c150219-d963-485e-b814-681171c066d2.tmp
Size 57B
SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
MD5 58127c59cb9e1da127904c341d15372b
SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
TLSH
T101900297652634755E1F1D65400B889B5CF905704E0B5E0641D032969A2A45D088705F
MD5 SHA1 SHA512 TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Cache\Cache_Data\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Cache\Cache_Data\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Cache\Cache_Data\f_00001a
Size 106KB
SHA256 81d7c5bb6e2be0e88f790e99b988ec0f423392168ac35693f61ac272ddc04768
MD5 8f5d386fd89689f8b5b2814edc0a0387
SHA1 ca7a7b507a18097c3a403e2426bace034934b20d
SHA512 798a3ea01f263f02d73ccd9699e5218c811bad72f2a79573a16227246dacfe845ceb46fa16e3ad3110b9ac1fd353949a6fa01fda598df9f6de1758adb2c4a00a
SSDEEP 3072:kJKUvzL4lj//5/8/tRdMcIkVaDvEardrVnmgro:R2zLKjZGtMc+EVL
TLSH
T133B31231C2AC4BA7141CED4EDD62368919CF98AB70013BC8DBC7A15F4957D2832F666B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000033

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Cache\Cache_Data\f_000033
Size 169KB
SHA256 e222f8ff285fe44e51b4982e50dbad2b0f34bf014e0527fb21d14592bfcf77c9
MD5 5ada40060b8c340cfcb434674040fd16
SHA1 f6e4cb05af0717095220e968bd5a2229c3242cb4
SHA512 238f19bf9ab53a4909e79d14377e1d0833f1a608aa138cd639661d4434718605a1268ada068956946725edd3a6b2ec5cc8a9586fdfcede59ed5e2385991e590a
SSDEEP 3072:gIn1PZ9ZHF48hUh9HH3kLs2QiKXTgQaJc4YD+v2Od0s:Hn1Nu88PrpaJfYqvus
TLSH
T16F04F14AED2EE823C01B1834D5A4E7684EB51BDFF1A5B34B73473AA894144050F89BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ec3e541-813b-4bfc-8c24-7476bfa40612.tmp

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\1ec3e541-813b-4bfc-8c24-7476bfa40612.tmp
Size 2KB
SHA256 1d7cbe9893abb125cdb11ee5be09c1f9905027fda0d16ef8a877f40b1787b38b
MD5 66c9ebf6561862d7e27b22ab9fc58f07
SHA1 e66429dbc231bdfec2c22c62b60b8b51417ad179
SHA512 fb5a82c130f8762fee0aec642dc749fc6d0dab5ad9575bc87354e8102c6d2c681e55ec29bda8b8f3cf4d79ac248946cac02cd87b44998aa8cad6fe8c7916f45d
TLSH
T1154187D7CBE80A2E8662A6F55F217E23C1BF062C522C3C0388C9EF4E57E1432924164E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

instances.json

Path C:\Users\Admin\AppData\Roaming\.sklauncher\instances.json
Size 886B
SHA256 c10754b237dbc95326ef4b481d58a1e34a9f18b31f8d25c4fb18ea57fef6dbb3
MD5 238d1321a9108bc59e0dd71be2a01c4c
SHA1 d09a93513d3b43365f5ccf88dc4ec26331ca5f73
SHA512 dc6c754c6e9d3715544c664048e9f21bfa5adf18aac231953524309bc6c772988ae36c05d4c464a7ed2070d9aac51bba30b706d211e92ed791e70eab00493b74
TLSH
T10811E969E36BAC1B34051331F9789342A910C9079E45BA1D7B9C18CC4F9D42F0C7A32E
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 612B
SHA256 a77ab5a3bb873131a5cb682934147529f66bfcd50b2a31391b506e9b4db1954e
MD5 be005d4907d16bc1523d9012e9e5aed3
SHA1 d399248d41c029b250ac975a8eb69c96cbae9474
SHA512 c1104e8bee94c14550e3314f57853d0d289fde5a9e73e6eac96b91d4c969d94e12a120d965f88360cf39f67848784e2ea8fc2a6ac3c2c07ca1db4aa1f878d4f1
TLSH
T1B0F08210E428BAFF342643086A6B6CCC657530774FD5A8B4778D835C9355C734A8D684
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 1KB
SHA256 6d4af50a9c277f8f0a5327f651824eea11608f517065ed58137ffe7f0e8a4ff0
MD5 036ee50ee2f101e4985c8fe020f165ef
SHA1 3443aa5084a4d38ff26357f861080e48d41526db
SHA512 31a18635e157dd209ed5907a255d10cb0dca7f1d131e137b5a7ee56a24701cb9bb040aba6f58be9732af5534028dc40c94a47e6f37dda92629f69fefa1b12a04
TLSH
T1EC116510E478BAFF352243196AABACCC657530771FD4A8B4734D835CA345C734A8E6D0
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 3KB
SHA256 4c5bfbf15e21a9d5a5987b088a705624ccfadf92e92196ca71582b11e29abc03
MD5 9d3ee121b070edc891aee657dda78c4c
SHA1 06118ff723e86a3b46ed31e6d0a354ed7e66c458
SHA512 38f44dc8e227283abf2c48208cf899219c826c37709811838c28d25439daf639587131f559329cba17038f4ee6388aaead562f27392e2e76e5931a1b212adcc9
TLSH
T16C512F10A4B8BAFF35520349AABB9CCC547230374FC469D8775D836C671AC73958DAC4
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 5KB
SHA256 71dc4f812499463258b1a4ed7760f4bfa97267d5bfb3d1b77f59a295f62ad778
MD5 c00f385b3d148424994afd622d6cf450
SHA1 81c858f277b0793b76a124a22cf47aa15ea277d2
SHA512 d8f209f8892df9882cd27f70b0051f4834432d550d6c095f451d1370c2061747eecc4b83049b44909cc7c601b1123feacf47a42e3276faf1d4e3109a9b137667
SSDEEP 96:oeiu5FPE4tdXVtNr65XD9Ko5T5m2k6ZgkQArk6ZgkQA2:h9rskNsXhjk2ywy7
TLSH
T11AB1DF1084B8BAFF24560319ABBB9CDD50B124375FC46AA8B31C875C774EC67A5CEAC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 6KB
SHA256 17b932ae55ed2686159f5845d2da81015e6dca3d783e893f47b9014971846c23
MD5 f17e0718fb15bc23ca4bbbe7789cc7b5
SHA1 8d99b61041c91ebea2221edfdc64786d51b9d43c
SHA512 13ca22b877ed03b05b3a341a095beccc55a8ea1fbfd182d3ce218e5c3729768fbacbdd85df0fc905d7b117babf405aaf64eaac07fe82d77f1154a885940dc38f
SSDEEP 96:oeiu5FPE4tdXVtNr65XD9Ko5T5m2k6ZgkQArk6ZgkQAl96vN4:h9rskNsXhjk2ywyYgvN4
TLSH
T19BD1EF0084B8F5FF24120359AA7B9CDD90B224375FC47AA8B35C875CB74FC6B659EA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json
Size 1KB
SHA256 8a58efbdc7ebe98b3402859239af34520ec4235cf604ab9db74269fa665173db
MD5 b5bc95fabdabf9b83be2c7b769a60e7d
SHA1 e869db8c06bf3289dbff27189aa5b679da2b3931
SHA512 375a9a20c9a49a21af1a61e8f080c84f3cf7fab76c9455cc44c144c86035c537798ff08adfe0cfc538bbaf8b3d82a99083598548b0056719f4e98f1a2844d1fd
TLSH
T1512100B1D52A52FA16E6D17ECDADD0239B328D1A02083C3C96B7180C200E73672F3EE5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json.tmp

Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json.tmp
Size 1KB
SHA256 d28785aa3422cc22d4d78c6501119a57a72c1d3dc1b98c24bf6bb09655ec027b
MD5 750d33a4dfaec29fb7478a53f222e818
SHA1 68bacff97d291a16087e420d97362970f11b8f51
SHA512 57e6d2c5a7d1e981534e31db5a045937fa0eb54180019ac691be9ff8583516bd84eae8b6e7d6574f0cfae2ca36aa44980b093be72f50547e3093d49de53f465c
TLSH
T1B32100B1D52A52BA16E6D17ACDADD0139B328D1A02083C3C96B7180C200E73772F3EE5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json.tmp

Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json.tmp
Size 1KB
SHA256 2fc43f1bc5761de27366652a5498874eb6787d73e527be24efc651172dcbc83f
MD5 1eb1a604070aa84b98e98c9cdffbe9ca
SHA1 a0e04fa46438f4ff59ffb1731da47204494d325c
SHA512 49c5486a09a595a270c23a8c4bc62d614e447cf437b57158981c9e65e4cf221c52275cc701ca5fef0450ffcdf714a8aa7633eda208b0ea3b8f02db380b76f48f
TLSH
T18A21FFB5D52A52FA26E6E17ACDADD0138B328D5A02083C3C96A7150C200E73672F3EE5
MD5 SHA1 SHA512 TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

SKlauncher 4.0.lnk

Path C:\Users\Admin\Desktop\SKlauncher 4.0.lnk
Size 2KB
SHA256 1f720f80fab38bf6ce8a5af37c28edb58d4b30076fb8f4fb343ff847a8970f62
MD5 be6c7db91516dd878cf42e51415c4a9c
SHA1 8ae20cec5f4ad5dfb164c33be410005d42f14b5f
SHA512 14f22dff8cf1024e473e7371cc3749b902f1c72efd991b832df7c69758b34c3a4d267c3543c45000baa2d64144d6c4370d992a3c17579112768769238e126a7c
TLSH
T19C4112005ED50118F3BF8B7E29FA6139D937F423AF15090D0294D60A1D3AD44EE98F2E
MD5 SHA1 SHA512 TLSH

Submit Download

92ffc88b-da30-4c24-a482-d71f6fd1fb4a.tmp

Path C:\Users\Admin\Downloads\92ffc88b-da30-4c24-a482-d71f6fd1fb4a.tmp
Size 122.0MB
SHA256 8fe5168ecd41fcfba4d360998ab95ddef4655c3eadb47aa956ea0b1dc41854d4
MD5 01dff9d9249a6059e8a6307a314a8851
SHA1 520161410e82c23fc28c9daa3dc551cb5155cde3
SHA512 f73cce35916483e1ef0bd039177a003213f72f9e9e25cf88df7c57d568e6365f90947ada90ac601c3503f1752601dad00d990c2c8d41656699ac75a1d777fb18
SSDEEP 3145728:/jNCuJ6tESiHxOwGVp2CRw0FF9RqCyo/lnAK2raGx2jy42HxarsO:bcTiHMrtGyAuGxyO8n
TLSH
T1F558336AECDA2A02D6BF53F017D8C1071B85DFB01DE3B0189EA968EFE9710AF155B501
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 137401.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 137401.crdownload
Size 122.0MB
SHA256 8fe5168ecd41fcfba4d360998ab95ddef4655c3eadb47aa956ea0b1dc41854d4
MD5 01dff9d9249a6059e8a6307a314a8851
SHA1 520161410e82c23fc28c9daa3dc551cb5155cde3
SHA512 f73cce35916483e1ef0bd039177a003213f72f9e9e25cf88df7c57d568e6365f90947ada90ac601c3503f1752601dad00d990c2c8d41656699ac75a1d777fb18
SSDEEP 3145728:/jNCuJ6tESiHxOwGVp2CRw0FF9RqCyo/lnAK2raGx2jy42HxarsO:bcTiHMrtGyAuGxyO8n
TLSH
T1F558336AECDA2A02D6BF53F017D8C1071B85DFB01DE3B0189EA968EFE9710AF155B501
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/424-833-0x000000006F8C0000-0x000000006F90C000-memory.dmp

Download

memory/424-836-0x0000000007AC0000-0x0000000007B56000-memory.dmp

Download

memory/424-837-0x0000000007A30000-0x0000000007A41000-memory.dmp

Download

memory/1712-1493-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1499-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1486-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1494-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1492-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1491-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1488-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1500-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1501-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1490-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1498-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1497-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1496-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1712-1495-0x0000022DEBDD0000-0x0000022DEBDD2000-memory.dmp

Download

memory/1868-850-0x000000006FB00000-0x000000006FE5B000-memory.dmp

Download

memory/1868-843-0x0000000005EA0000-0x00000000061FB000-memory.dmp

Download

memory/1868-847-0x000000006F8C0000-0x000000006F90C000-memory.dmp

Download

memory/1980-804-0x00000000066B0000-0x00000000066FC000-memory.dmp

Download

memory/1980-810-0x00000000078C0000-0x0000000007963000-memory.dmp

Download

memory/1980-796-0x0000000005A20000-0x000000000606A000-memory.dmp

Download

memory/1980-797-0x00000000057B0000-0x00000000057D2000-memory.dmp

Download

memory/1980-801-0x00000000060E0000-0x0000000006146000-memory.dmp

Download

memory/1980-798-0x0000000006070000-0x00000000060D6000-memory.dmp

Download

memory/1980-816-0x000000006FA20000-0x000000006FD7B000-memory.dmp

Download

memory/1980-814-0x0000000007B80000-0x0000000007BAA000-memory.dmp

Download

memory/1980-815-0x0000000007BB0000-0x0000000007BD4000-memory.dmp

Download

memory/1980-813-0x00000000079E0000-0x00000000079EA000-memory.dmp

Download

memory/1980-812-0x0000000007970000-0x000000000798A000-memory.dmp

Download

memory/1980-811-0x0000000007FF0000-0x000000000866C000-memory.dmp

Download

memory/1980-802-0x00000000061E0000-0x000000000653B000-memory.dmp

Download

memory/1980-803-0x0000000006620000-0x000000000663E000-memory.dmp

Download

memory/1980-805-0x00000000077C0000-0x00000000077F6000-memory.dmp

Download

memory/1980-795-0x0000000003100000-0x0000000003136000-memory.dmp

Download

memory/1980-806-0x000000006F8C0000-0x000000006F90C000-memory.dmp

Download

memory/1980-809-0x0000000006BD0000-0x0000000006BF0000-memory.dmp

Download

memory/6120-1480-0x000001D619930000-0x000001D619931000-memory.dmp

Download

memory/6120-1484-0x000001D619930000-0x000001D619931000-memory.dmp

Download

memory/6120-1471-0x000001D619930000-0x000001D619931000-memory.dmp

Download

memory/6120-1473-0x000001D619930000-0x000001D619931000-memory.dmp

Download

memory/6120-1481-0x000001D619930000-0x000001D619931000-memory.dmp

Download

memory/6120-1483-0x000001D619930000-0x000001D619931000-memory.dmp

Download

memory/6120-1485-0x000001D619930000-0x000001D619931000-memory.dmp

Download

memory/6120-1482-0x000001D619930000-0x000001D619931000-memory.dmp

Download